Skip to content

Literal Eval to Eval (Algorand)#4885

Open
mdulin2 wants to merge 1 commit into
wormhole-foundation:mainfrom
mdulin2:remove-eval-algorand
Open

Literal Eval to Eval (Algorand)#4885
mdulin2 wants to merge 1 commit into
wormhole-foundation:mainfrom
mdulin2:remove-eval-algorand

Conversation

@mdulin2

@mdulin2 mdulin2 commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

The Python eval() is a known bad sink for code execution bugs. Although there's no security impact with this currently, we're proactively changing the eval() to literal_eval() to prevent this from ever becoming an issue.

@johnsaigle johnsaigle force-pushed the remove-eval-algorand branch from 8e7a06f to 06de448 Compare July 3, 2026 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants