RCE in Danthedeckie Simpleeval
CVE-2026-32640
SimpleEval is a library for adding evaluatable expressions into python projects. Prior to 1.0.5, objects (including modules) can leak dangerous modules through to direct access inside the sandbox. If the objects you've passed in as names t…
Vulnerability class: Mass Assignment
EPSS: 0.001 (16.5th percentile) — read the EPSS interpretation.
Affected products
- Danthedeckie Simpleeval — versions < 1.0.5
Weakness classification (CWE)
References
- https://github.com/danthedeckie/simpleeval/security/advisories/GHSA-44vg-5wv2-h2hg (x_refsource_CONFIRM)