Topic description: "An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. ..."
"Js2py is JavaScript to Python Translator & JavaScript interpreter written in 100% pure Python ..."