Eval Eval
The application was found calling the `eval` function with non-literal data. If the variable contains user-controlled data, either partially or fully, an adversary could compromise the entire system by executing arbitrary Python code. To remediate this issue, remove all calls to `eval` and consider alternative methods for executing the necessary business log
greprules fetch gitlab-sast-python-eval-rule-eval --engine opengrepDescription
The application was found calling the `eval` function with non-literal data. If the variable contains user-controlled data, either partially or fully, an adversary could compromise the entire system by executing arbitrary Python code. To remediate this issue, remove all calls to `eval` and consider alternative methods for executing the necessary business log
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.