> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Code

<AccordionGroup>
  <Accordion title="user-eval-format-string">
    Found user data in a call to 'eval'. This is extremely dangerous because it can enable an attacker to execute remote code. See [https://owasp.org/www-community/attacks/Code\_Injection](https://owasp.org/www-community/attacks/Code_Injection) for more information.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="user-exec">
    Found user data in a call to 'exec'. This is extremely dangerous because it can enable an attacker to execute arbitrary remote code on the system. Instead, refactor your code to not use 'eval' and instead use a safe library for the specific functionality you need.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="user-exec-format-string">
    Found user data in a call to 'exec'. This is extremely dangerous because it can enable an attacker to execute arbitrary remote code on the system. Instead, refactor your code to not use 'eval' and instead use a safe library for the specific functionality you need.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="globals-misuse-code-execution">
    Found request data as an index to 'globals()'. This is extremely dangerous because it allows an attacker to execute arbitrary code on the system. Refactor your code not to use 'globals()'.<br />**Likelihood**: LOW<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>

  <Accordion title="user-eval">
    Found user data in a call to 'eval'. This is extremely dangerous because it can enable an attacker to execute arbitrary remote code on the system. Instead, refactor your code to not use 'eval' and instead use a safe library for the specific functionality you need.<br />**Likelihood**: MEDIUM<br />**Confidence**: MEDIUM<br />**CWE**: <br />- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>