Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

GHSA-h95x-26f3-88hr

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-h95x-26f3-88hr

js2py allows remote code execution An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

gitlab/pypi/js2py/CVE-2024-28397

js2py allows remote code execution An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

pypa/js2py/PYSEC-2026-1476

js2py allows remote code execution An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

pysec/PYSEC-2026-1476

js2py allows remote code execution An issue in the component `js2py.disable_pyimport()` of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.