In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP (CVE-2020-27619).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2020-0477.json"