pypi package report

Is com.googlecode.aviator:aviator safe?

1 known vulnerability, worst severity CRITICAL.

cvss
9.0

how bad it is if exploited, out of 10

epss
1.9%

chance of exploitation in the next 30 days

xyz score
4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-xpv2-8ppj-79hh, the advisory selected below

// advisories

GHSA-xpv2-8ppj-79hh

CRITICALCVE-2021-41862

AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).

Affected
>= 5.2.1, <= 5.2.7
Fixed in
not stated
Published
2021-10-04
Source
github

GHSANVDMITREreference


// ai model usage

No published models are known to use this package.


Checked 2026-09-22 at 01:44 UTC. The most recent advisory here was published 2021-10-04. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.
Is com.googlecode.aviator:aviator safe? pypi package security report | CyberXYZ