From f7a220108065ba76dfb9ef97cbe8e72ac3b6835c Mon Sep 17 00:00:00 2001 From: Andrew Murray Date: Mon, 13 Apr 2026 13:17:14 +1000 Subject: [PATCH] Do not set eval() globals --- src/PIL/ImageMath.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/PIL/ImageMath.py b/src/PIL/ImageMath.py index dfdc50c0552..f62c6a3f845 100644 --- a/src/PIL/ImageMath.py +++ b/src/PIL/ImageMath.py @@ -307,7 +307,7 @@ def scan(code: CodeType) -> None: raise ValueError(msg) scan(compiled_code) - out = builtins.eval(expression, {"__builtins": {"abs": abs}}, args) + out = builtins.eval(expression, None, args) try: return out.im except AttributeError: