NetSight
high7.8

CVE-2026-78136

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data.

Impact

chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References