Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4161
  • PyPI/restrictedpython
 RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution 01 Oct
  • Fix available
  • Severity - 8.4 (High)
GHSA-hp3v-5vw7-fx9w
  • PyPI/restrictedpython
 RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution 17 Sep
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-3917
  • PyPI/restrictedpython
 RestrictedPython guard hooks can be shadowed via positional-only arguments 10 Sep
  • Fix available
  • Severity - 8.3 (High)
GHSA-ffg3-p8fm-mjx2
  • PyPI/restrictedpython
 RestrictedPython guard hooks can be shadowed via positional-only arguments 28 Aug
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-1874
  • PyPI/restrictedpython
 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter 07 Jul
  • Fix available
  • Severity - 7.9 (High)
GHSA-gmj9-h825-chq2
  • PyPI/restrictedpython
 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter 23 Jan 2025
  • Fix available
  • Severity - 7.9 (High)
GHSA-5rfv-66g4-jr8h
  • PyPI/restrictedpython
 RestrictedPython information leakage via `AttributeError.obj` and the `string` module 30 Sep 2024
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2024-186
  • PyPI/restrictedpython
  • github.com/zopefoundation/restrictedpython
 See record for full details 30 Sep 2024
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-xjw2-6jm9-rf67
  • PyPI/restrictedpython
 Sandbox escape via various forms of "format". 30 Aug 2023
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2023-159
  • PyPI/restrictedpython
  • github.com/zopefoundation/RestrictedPython
 See record for full details 30 Aug 2023
  • Fix available
  • Severity - 7.7 (High)
PYSEC-2023-118
  • PyPI/restrictedpython
  • github.com/zopefoundation/RestrictedPython
 See record for full details 11 Jul 2023
  • Fix available
GHSA-wqc8-x2pr-7jqh
  • PyPI/restrictedpython
 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape 10 Jul 2023
  • Fix available
  • Severity - 8.4 (High)