R: Statement on CVE-2024-27322

[NewsBot]

A new R blog post/announcement has been posted!

This is a brief statement on behalf or the R Core Team on the serialization bug recently reported by the cybersecurity form HiddenLayer. The bug has been reported as a vulnerability with id CVE-2024-27322.
R is a full-featured language that includes functions to interface with both the host operating system and the Internet. As with any such language, there are many ways to write code with malicious intent. Users should ensure that they only use R code and data from trusted sources and that the privileges of the account running R are appropriately limited.

Get the full details here: https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/