Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use __class__, __bases__, __subclasses__(), and __globals__ chains to access restricted functions and execute arbitrary system commands from plugin code.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
⚠️ Vulnerabilidades en Libreria de Python ❗ CVE-2026-74901 ❗ CVE-2026-74900 ❗ CVE-2026-74896 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-libreria-de-python/ https://t.co/PLKCikgWT5
Post summary
The text lists three Python library CVEs with a reference link, but provides no further details.
CVE-2026-74896 Sandbox Escape in openssl_encrypt Before 1.4.0 Allows Command Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-74896
Post summary
CVE-2026-74896 discloses a sandbox escape vulnerability in openssl_encrypt prior to version 1.4.0, which allows arbitrary command execution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jahlives | openssl_encrypt | - | python | - |