weilanx-creator-lamplight-video
Warn
Audited by Socket on Oct 19, 2026
1 alert found:
SecuritySecurityscripts/timeline_lib.py
MEDIUMSecurityMEDIUM
scripts/timeline_lib.py
This module parses data from a file but evaluates declaration and shot expressions with unrestricted Python `eval`. A crafted or untrusted input file can execute arbitrary code with the application's permissions, making this a significant code-execution risk; no specific malicious payload, network indicator, or credential target is present in the supplied code.
Confidence: 99%Severity: 85%
Audit Metadata