## PDSA-2022-002: Code injection in paddle.audio.functional.get_window
### CVE Number
CVE-2022-46742
### Impact
`paddle.audio.functional.get_windowis` vulnerable to a code injection as it calls `eval` on user supplied `winstr`. This may lead to arbitrary code execution.