File _patchinfo of Package patchinfo.18449

<patchinfo incident="18449">
  <issue tracker="cve" id="2024-28397"/>
  <issue tracker="bnc" id="1226660">VUL-0: CVE-2024-28397: python-Js2Py: an issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.</issue>
  <packager>dgarcia</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for python-Js2Py</summary>
  <description>This update for python-Js2Py fixes the following issues:

- CVE-2024-28397: Fixed an issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.
  (boo#1226660, gh#PiotrDabkowski/Js2Py#323)
</description>
</patchinfo>