~ / search / GHSA-jx3q-5rgf-vrrr

GHSA-jx3q-5rgf-vrrr

xalpha vulnerable to Remote Code Execution

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-37659

Packages

EcosystemPackageAffectedFixed in
PyPI xalpha >= 0.11.4, < 0.11.9 0.11.9

Details

As written in the advisory (Markdown source, shown as plain text).

xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). User input is not properly checked to be numerical values prior to being evaluated.

References

External links from the advisory. They lead to third-party sites.