Vulnerabilities for asteval

First version without a known vulnerability: 1.0.9

Details

• GHSA-89v8-rhwq-hf772026-08-20

  asteval has a Sandbox Escape via BaseException Subclasses

  Fixed in: 1.0.9

• GHSA-9w56-46f6-3qhx2026-08-20

  asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter

  Fixed in: 1.0.9

• GHSA-3wwr-3g9f-9gc72025-01-24

  ASTEVAL Allows Maliciously Crafted Format Strings to Lead to Sandbox Escape

  Fixed in: 1.0.6

• GHSA-vp47-9734-prjw2025-01-23

  ASTEVAL Allows Malicious Tampering of Exposed AST Nodes Leads to Sandbox Escape

  Fixed in: 1.0.6