Apport blindly uses the python eval () function on an unsanitized field (CrashDB) inside the .crash file. This leads directly to arbitrary python code execution.

An important discovery is that the subroutine hpprime.eval ('<PPL command>') is a way to get at PPL commands that don't have python equivalents. In particular, it allows easy access to menu-oriented ...

You're taking a new programming class this fall, and you don't know anything about code. Python is taught widely in schools, and it's one of the most loved programming languages because it's simple.