8000 add warning for eval and exec (unsafe usage may lead to critical vulnerabilities) · Issue #118633 · python/cpython · GitHub
[go: up one dir, main page]

Skip to content
add warning for eval and exec (unsafe usage may lead to critical vulnerabilities) #118633
Closed
@DanielRuf

Description

@DanielRuf

Documentation

Currently there are no warnings regarding the unsafe usage of eval and exec. If arbitrary user-supplied input is passed to them, this may pose a big security risk.

Relevant PR:

#118437

Blogpost that made me aware of that: https://snyk.io/de/blog/code-injection-vulnerabilities-caused-by-generative-ai/

Linked PRs

Metadata

Metadata

Assignees

No one assigned

    Labels

    docsDocumentation in the Doc dirtype-securityA security issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0