The use of exec can be insecure

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Metadata

ID: python-security/no-exec

Language: Python

Severity: Error

Category: Security

CWE: 94

Description

exec() is insecure, and passing in unsanitized data could create a vulnerability, as reported by the official Python documentation. Generated code should be controlled as mentioned in CWE-94.

Learn More

  • CWE-94 - Improper Control of Generation of Code

Non-Compliant Code Examples

exec("a = 2")

Compliant Code Examples

a = 2
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Analysis