lmfit

Products

ProductCVEsExploitedLatest
asteval3–Oct 13, 2026

Exploited and recent CVEs

  • CVE-2026-102734 Medium 5.5 asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter 0.1%
  • CVE-2026-55244 Medium 5.0 ASTEVAL: Sandbox Escape via BaseException Subclasses 0.2%
  • CVE-2025-24359 High 8.4 ASTEVAL Vulnerable to Maliciously Crafted Format Strings Leading to Sandbox Escape 0.3%