Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-53924

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-pw67-xjhq-389w

Pycel allows code injection via a crafted formula Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the `=IF(A1=200, eval("__import__('os').system(` substring.

gitlab/pypi/pycel/CVE-2024-53924

Pycel allows code injection via a crafted formula Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the `=IF(A1=200, eval("__import__('os').system(` substring.

pypa/pycel/PYSEC-2025-177

Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring.

pysec/PYSEC-2025-177

Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring.