Threats tagged 'ghsa-5cp4-g2w4-gm8p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.8%	CVE-2026-74899jahlives openssl_encrypt · Eval Injection Critical9.3EPSS 0.8%2026-08-17CVE Database V5CVE-2026-74899 openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Python class hierarchy via __class__.__mro__.__subclasses__() to access system functions and execute arbitrary OS commands. EPSS 0.8%Vulnerability #ghsa-5cp4-g2w4-gm8p	CVE Database V5	2026-08-17

Page 1 of 1