Closed
Description
Documentation
Currently there are no warnings regarding the unsafe usage of eval
and exec
. If arbitrary user-supplied input is passed to them, this may pose a big security risk.
Relevant PR:
Blogpost that made me aware of that: https://snyk.io/de/blog/code-injection-vulnerabilities-caused-by-generative-ai/