RCE in Danthedeckie Simpleeval

CVE-2026-32640

SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names t…

Vulnerability class: Mass Assignment

EPSS: 0.001 (16.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References