VDB
GHSA-9w56-46f6-3qhx
GHSA-9w56-46f6-3qhx
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published August 20, 2026
asteval is fixed in 1.0.9 (PyPI)
asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| asteval | PyPI | 1.0.9 |
| keep | Chainguard | 0.54.2-r6 |
| keep-fips | Chainguard | 0.54.2-r9 |
| checkov | Wolfi | 3.3.16-r2 |
| checkov | Chainguard | 3.3.16-r2 |
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | keep | 0 |
| chainguard | keep-fips | 0 |
| PyPI | asteval | 0 |
| wolfi | checkov | 0 |
| chainguard | checkov | 0 |
Timeline
- Aug 20, 2026 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-9w56-46f6-3qhx
vulnetix vdb fixes GHSA-9w56-46f6-3qhxOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-9w56-46f6-3qhx/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://github.com/advisories/GHSA-9w56-46f6-3qhx advisory
- https://github.com/lmfit/asteval/security/advisories/GHSA-9w56-46f6-3qhx url
- https://github.com/lmfit/asteval/pull/153 patch
- https://github.com/lmfit/asteval/commit/a3e56e7f8ed567a4817684d94213b290359077b4 patch
- https://github.com/lmfit/asteval/releases/tag/1.0.9 url