pypi package report

Is numexpr safe?

1 known vulnerability, worst severity CRITICAL.

cvss

9.0

how bad it is if exploited, out of 10

epss

1.6%

chance of exploitation in the next 30 days

xyz score

5.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-f73w-4m7g-ch9x, the advisory selected below

// advisories

GHSA-f73w-4m7g-ch9x

CRITICALCVE-2023-39631

An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

// dependencies

1 direct, 1 carrying known advisories, worst CRITICAL

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 00:38 UTC. The most recent advisory here was published 2023-09-01. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is numexpr safe? pypi package security report | CyberXYZ