File _patchinfo of Package patchinfo.34528
<patchinfo incident="34528">
<issue tracker="cve" id="2024-28397"/>
<issue tracker="bnc" id="1226660">VUL-0: CVE-2024-28397: python-Js2Py: an issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.</issue>
<packager>dgarcia</packager>
<rating>critical</rating>
<category>security</category>
<summary>Security update for python-Js2Py</summary>
<description>This update for python-Js2Py fixes the following issues:
- CVE-2024-28397: Fixed a potential sandbox escape via untrusted
JavaScript code (bsc#1226660).
</description>
</patchinfo>