A vulnerability was found in Astropy 5.3.2. It has been declared as critical. This vulnerability affects the function TranformGraph.to_dot_graph. The manipulation of the argument savelayout leads to command injection.

This vulnerability was named CVE-2023-41334. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.