[Git][security-tracker-team/security-tracker][master] Add CVE-2026-102734/python-asteval

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2fec4505 by Salvatore Bonaccorso at 2026-10-14T16:11:01+02:00
Add CVE-2026-102734/python-asteval

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4669,7 +4669,10 @@ CVE-2026-102832 (JupyterLab is an extensible environment for interactive and rep
 	- jupyterlab <not-affected> (Vulnerable code introduced later in 4.5.7)
 	NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-jwrc-gm9j-263p
 CVE-2026-102734 (asteval is a Python expression evaluator designed for restricted execu ...)
-	TODO: check
+	- python-asteval <unfixed>
+	NOTE: https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx
+	NOTE: https://github.com/lmfit/asteval/pull/153
+	NOTE: Fixed by (merge): https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4 (1.0.9)
 CVE-2026-102672 (Electron is a framework for writing cross-platform desktop application ...)
 	TODO: check
 CVE-2026-102603 (Gotify server is a simple server for sending and receiving messages in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fec4505edb0cd8ee2426ea0e44618370bf54eed

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2fec4505edb0cd8ee2426ea0e44618370bf54eed
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/2da0e49f/attachment.htm>