github.com
`str_to_var` and `ConfigFile` allow for arbitrary code execution · Issue #80562 · godotengine/godot
Godot version v4.1.1.stable.official [bd6af8e] System information Ubuntu 23.04 Issue description The global method str_to_var and ConfigFile's load/parse methods deserialize variants from strings, ...