https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:50:25 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-42002 <p>A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) &#39;ros2topic&#39; command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the &#39;hz&#39; verb, which reports the publishing rate of a topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.</p> <p>A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) &#39;ros2topic&#39; command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the &#39;hz&#39; verb, which reports the publishing rate of a topic and accepts a user-provided Python expression via the --filter option. This input is passed directly to the eval() function without sanitization, allowing a local user to craft and execute arbitrary code.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-42002