ast.literal_eval() instead of eval() ?

[jipen]

Not a proper issue but just a suggestion to avoid security issues:

Instead of (line 94 in ctk_listbox.py):

values = list(eval(self.listvariable.get()))

Perhaps:

import ast
...
values = list(ast.literal_eval(self.listvariable.get()))

could be better ?

Tested on my own application and it works.