PatchTheCVEsimpleeval vulnerabilities and fixes
Recent CVEs affecting simpleeval, with upgrade or downgrade steps. 1 tracked.
simpleeval has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-03-16. Highest priority: CVE-2026-32640 (score 50/100).
- CVE-2026-32640 CRITICAL 9.8 UPGRADE SimpleEval is a library for adding evaluatable expressions into python projects
FAQ
How do I fix simpleeval vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simpleeval being exploited right now?
None of the tracked simpleeval CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simpleeval CVE should I patch first?
CVE-2026-32640 currently ranks highest (50/100): SimpleEval is a library for adding evaluatable expressions into python projects.