Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.
Advisories for Pypi/Py2Play package
2022