Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login flow.
CWE-94, CWE-95, CWE-94