Threats tagged 'ghsa-cgc3-662q-qmrc'

Trail of Bits fickling versions through 0.1.12 contain a vulnerability in the _process_import() method that trusts imported names from standard library modules without verifying their behavior. This leads to the OvertlyBadEvals analysis pass skipping dangerous calls, allowing arbitrary code execution or file writes via trusted but unsafe callables. Demonstrated exploits include arbitrary code execution through dataclasses._create_fn and mailcap.findmatch, and arbitrary file writes via readline methods. The vulnerability is due to trusting module origin for callable safety and is distinct from a related CVE-2026-118938. The issue remains in released versions through 0.1.12, with a pending fix on the vendor master branch.