PLY has been abandoned, RCEs have been reported

[ankenyr]

PLY, which Capirca uses for it's DSL, has been abandoned.
There is an RCE that has been reported. I believe Capirca is not affected.
It is unknown at this time if this RCE will be fixed or if more will be found over time.

It would benefit Capirca users for the project to switch to another parser that is supported.
Aerleon is currently considering how to replace it. As we share the same DSL it would benefit us to collaborate. Please let me know if you would be willing to collaborate on this effort.

https://github.com/dabeaz/ply?tab=readme-ov-file#important-notice---december-21-2025
https://github.com/bohmiiidd/Undocumented-RCE-in-PLY