https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 17:18:58 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-39835 <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-39835 https://vulnerability.circl.lu/vuln/ghsa-627q-xcr8-8qpc <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> https://vulnerability.circl.lu/vuln/ghsa-627q-xcr8-8qpc https://vulnerability.circl.lu/vuln/ubuntu-cve-2024-39835 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ros-ros-comm, Ubuntu:18.04:LTS: ros-ros-comm, Ubuntu:20.04:LTS: ros-ros-comm, Ubuntu:22.04:LTS: ros-ros-comm</p> <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ros-ros-comm, Ubuntu:18.04:LTS: ros-ros-comm, Ubuntu:20.04:LTS: ros-ros-comm, Ubuntu:22.04:LTS: ros-ros-comm</p> <p>A code injection vulnerability has been identified in the Robot Operating System (ROS) &#39;roslaunch&#39; command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied, unsanitized parameter values within the substitution args mechanism, which roslaunch evaluates before launching a node. This flaw allows attackers to craft and execute arbitrary Python code.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2024-39835