However the bigger feature is that you can access attributes and items of objects. The latter is what is causing the problem here.

This includes globals that you may not expect to be accessible.

{event.__init__.__globals__[CONFIG][SECRET_KEY]}

source: HN