All 3 CVE vulnerabilities found in asteval, with AI-generated Chinese analysis, references, and POCs.
Vendor: lmfit
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-102734 | asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter CWE-693 | 5.5 | Medium | 2026-10-13 |
| CVE-2026-55244 | ASTEVAL: Sandbox Escape via BaseException Subclasses CWE-248 | 5.0 | Medium | 2026-09-14 |
| CVE-2025-24359 | ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape CWE-134 | 8.4 | High | 2025-01-24 |
All 3 known CVE vulnerabilities affecting asteval with full Chinese analysis, references, and POCs where available.