Is this a safe use of python eval()?

Question

If an attacker can control the value of attacker_controlled_nasty_variable, is this segment of code vulnerable?

dic={"one":1,
      "nasty":attacker_controlled_nasty_variable,
     }
store=str(dict)
...
dic=eval(store)

Answer 1

Use ast.literal_eval() instead of eval().