CVE-2020-27619

Name of the Vulnerable Software and Affected Versions Python versions 3 through 3.9.0

Description The issue arises from the Lib/test/multibytecodec support.py CJK codec tests in Python, which call eval() on content retrieved via HTTP. This poses a risk due to the potential for executing arbitrary code.

Recommendations For Python versions 3 through 3.9.0, consider disabling the eval() function calls in the Lib/test/multibytecodec support.py CJK codec tests until a patch is available. Restrict access to the vulnerable CJK codec tests to minimize the risk of exploitation. Avoid using the eval() function on content retrieved via HTTP in the affected tests.