/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2024-28397

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-28397

CGA ID

CGA-r2xp-hg8p-6x2f

Severity

Unknown

Summary

js2py allows remote code execution

Description

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

References

  • https://images.chainguard.dev/security/CGA-r2xp-hg8p-6x2f

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs