PyPi: Plusminus

PVE-2021-38323

Safety vulnerability ID: 38323

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 14, 2021 Updated at Aug 03, 2024

Advisory

Plusminus 0.3.0 has been hardened against some possible attacks, using deep expression ne…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

plusminus

Latest version: 0.8.1

+/- plusminus is a module that builds on the pyparsing infixNotation helper method to build easy-to-code and easy-to-use parsers for parsing and evaluating infix arithmetic expressions. plusminus's ArithmeticParser class includes separate parse and evaluate methods, handling operator precedence, override with parentheses, presence or absence of whitespace, built-in functions, and pre-defined and user-defined variables, functions, and operators.

Affected versions

Fixed versions

Vulnerability changelog

- Added syntax to clear a defined variable: a, b = 1, 2 c = a + b …

[This text has been limited. Please create a free account to view the full text.]

Resources