CVE-2025-24359 — ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they can bypass asteval's restrictions and exec — CVE Database · The Intelligence Room