An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.
CWE-94 Improper Control of Generation of Code ('Code Injection')