VYPR

uproot5

by Scikit Hep

CVEs (1)

  • CVE-2026-9147Jul 18, 2026
    risk 0.00cvss epss 0.00

    uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source without safe quoting…