battlehack20 (>=1.0.0, <=1.1.0), battlehack20-fancyviewer (>=1.0.1, <=1.0.5) potentially affected by CVE-2023-41039 via restrictedpython (4.0.0b4)

restrictedpython PYPI version 4.0.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - battlehack20 =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2023-41039 Source advisory: OSV:GHSA-XJW2-6JM9-RF67...

DEBIAN-CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

Format string

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

PYSEC-2023-159

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

aimmo (>=0.4.0b3098, <=0.27.4b5229), codeforlife-portal (>=1.1.1, <=1.2.1) potentially affected by CVE-2023-41039 via restrictedpython (4.0.0b7)

restrictedpython PYPI version 4.0.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - aimmo =0.4.0b3098, =1.1.1, =1.2.1 Source cves: CVE-2023-41039 Source advisory: OSV:PYSEC-2023-159...

dektools (>=0.1.0, <=0.1.117), dimensigon (>=0.3.4, <=0.3.5) +2 more potentially affected by CVE-2023-41039 via restrictedpython (>=5.0.0, <=5.2.0)

restrictedpython PYPI version =5.0.0, =0.1.0, =0.3.4, =0.0.41a1, =0.1047.0, =1.7.36 Source cves: CVE-2023-41039 Source advisory: OSV:PYSEC-2023-159...

PYSEC-2023-159

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

UBUNTU-CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

battlehack20 (>=1.0.0, <=1.1.0), battlehack20-fancyviewer (>=1.0.1, <=1.0.5) potentially affected by CVE-2023-41039 via restrictedpython (4.0.0b4)

restrictedpython PYPI version 4.0.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - battlehack20 =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2023-41039 Source advisory: OSV:PYSEC-2023-159...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +3 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0, <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2023-41039 Source advisory: OSV:PYSEC-2023-159...

CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +3 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0, <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2023-41039 Source advisory: MEND:CVE-2023-41039...

aimmo (>=0.4.0b3098, <=0.27.4b5229), battlehack20 (>=1.0.0, <=1.1.0) +6 more potentially affected by CVE-2023-41039 via restrictedpython (>=4.0.0b4, <=5.2.0)

restrictedpython PYPI version =4.0.0b4, =0.4.0b3098, =1.0.0, =1.0.1, =1.1.1, =0.1.0, =0.3.4, =0.0.41a1, =0.1047.0, =1.7.36 Source cves: CVE-2023-41039 Source advisory: MEND:CVE-2023-41039...

CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

CVE-2023-41039

CVE-2023-41039 affects RestrictedPython. The issue stems from Python’s string format/format_map inside RestrictedPython enabling a format string controller to read objects via recursive attribute lookup and subscription, causing potential information disclosure. All known RestrictedPython version...

CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...