Sebezhetőség a Python-js2Py csomagban, amelyet havonta több mint egymillió alkalommal töltenek le
A Js2Py Python package, which was downloaded 1.2 million times last month, has a vulnerability (CVE-2024-28397) that allows bypassing sandbox isolation and executing code on the system when processing specially crafted JavaScript data. This vulnerability can be exploited to attack programs using Js2Py for executing JavaScript code. A patch is currently the only available fix. A prototype has been prepared to test the exploitability […]
