Skip to content

add warning for eval and exec (unsafe usage may lead to critical vulnerabilities) #118633

@DanielRuf

Description

@DanielRuf

Documentation

Currently there are no warnings regarding the unsafe usage of eval and exec. If arbitrary user-supplied input is passed to them, this may pose a big security risk.

Relevant PR:

#118437

Blogpost that made me aware of that: https://snyk.io/de/blog/code-injection-vulnerabilities-caused-by-generative-ai/

Linked PRs

Metadata

Metadata

Assignees

No one assigned

    Labels

    docsDocumentation in the Doc dirtype-securityA security issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions