CVE-2024-48050
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a se…
Published: 2024-11-04 · CVSS: 9.8 · CVSS 3.1
In agentscope <=v0.0.4, the file agentscope\web\workstation\workflow_utils.py has the function is_callable_expression. Within this function, the line result = eval(s) poses a security risk as it can directly execute user-provided commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7