GCVE-110-PYPI-2026-020799

Advisory Published

Vulnetix · Advisory published October 14, 2026

[P-PYTHON-DYNAMIC-IMPORT] Python dynamic import to execute system commands — matched: "__import__('os').system('echo hi') > 0", "close.__class__ > 0", "open[0] > 1", "(lambda: 1)() > 0",

Download JSON Open in Console

Weaknesses (CWE)

CWE-506Embedded Malicious CodeCWE-94Improper Control of Generation of Code ('Code Injection')

Affected Products

Vendor	Product	Versions	Platforms
pypi	edgeorluck	2.1.1 (affected), 2.1.0 (affected), 2.2.1 (affected), 2.4.0 (affected)	—

References

advisory

web

Browse GCVE Records

5,487 records in the GCVE database · Updated October 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON