CRITICAL10.0PyPI
GHSA-69v7-xpr6-6gjm· CVE-2026-34444, PYSEC-2026-2613Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr
Modified: 9/10/2026
package
PyPI/lupa
pkg:pypi/lupa
CRITICAL10.0PyPI
PYSEC-2026-2613· CVE-2026-34444, GHSA-69v7-xpr6-6gjmLupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr
Modified: 7/13/2026