parser_sandbox.py:109 _sanitised_env keeps PATH, PYTHONPATH, HOME, TMPDIR, etc. An inherited PYTHONPATH pointing at an attacker-controlled directory lets the 'sandboxed' parser import arbitrary modules. No privilege drop.
Fix: drop PYTHONPATH (or reset to a fixed safe value) and run the parser child as an unprivileged user.
parser_sandbox.py:109 _sanitised_env keeps PATH, PYTHONPATH, HOME, TMPDIR, etc. An inherited PYTHONPATH pointing at an attacker-controlled directory lets the 'sandboxed' parser import arbitrary modules. No privilege drop.
Fix: drop PYTHONPATH (or reset to a fixed safe value) and run the parser child as an unprivileged user.