このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください

Metadata

ID: python-security/no-exec

Language: Python

Severity: Error

Category: Security

CWE: 94

Description

exec() is insecure, and passing in unsanitized data could create a vulnerability, as reported by the official Python documentation. Generated code should be controlled as mentioned in CWE-94.

Learn More

  • CWE-94 - Improper Control of Generation of Code

Non-Compliant Code Examples

exec("a = 2")

Compliant Code Examples

a = 2