CRITICAL 9.8

PYSEC-2025-177

상세

Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / pycel

최초 영향 버전: 0

No fixed version published yet for pycel (pip). Pin to a known-safe version or switch to an alternative.

참고

https://github.com/dgorissen/pycel [PACKAGE]
https://github.com/stephenrauch/pycel [PACKAGE]
https://pypi.org/project/pycel/ [PACKAGE]
https://gist.github.com/aelmosalamy/cb098e61939718d2bb248fd1cc94f287 [EVIDENCE]