Lucene search
K

9 matches found

Redos
Redos
added 2026/05/05 12:0 a.m.3 views

ROS-20260505-73-0027

A vulnerability in the appendChild and clearidcache functions of the Python programming language interpreter CPython is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.3CVSS7.1AI score0.00128EPSS
Exploits0
Redos
Redos
added 2026/05/05 12:0 a.m.4 views

ROS-20260505-73-0016

A vulnerability in the ElementDeclHandler component of the Python Programming Language Interpreter CPython is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6CVSS7.3AI score0.0005EPSS
Exploits0
Cvelist
Cvelist
added 2025/01/23 5:34 p.m.17 views

CVE-2025-22153 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...

7.9CVSS0.00049EPSS
Exploits0References2
CVE
CVE
added 2025/01/23 5:34 p.m.80 views

CVE-2025-22153

CVE-2025-22153 describes a type-confusion vulnerability in RestrictedPython exploitable via CPython 3.11–3.12 when using try/except*. The flaw allows bypassing RestrictedPython protections in versions 6.0 up to, but not including, 8.0. The fix is in RestrictedPython 8.0, which removes support for...

7.9CVSS7.4AI score0.00049EPSS
Exploits0References2
OSV
OSV
added 2025/01/23 5:19 p.m.12 views

GHSA-GMJ9-H825-CHQ2 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

Impact Via a type confusion bug in the CPython interpreter when using try/except RestrictedPython could be bypassed. We believe this should be fixed upstream in Python itself until that we remove support for try/except from RestrictedPython. It has been fixed for some Python versions. Patches...

7.9CVSS7.6AI score0.00049EPSS
Exploits0References4
Snyk
Snyk
added 2025/01/23 5:19 p.m.3 views

Access of Resource Using Incompatible Type ('Type Confusion')

Overview Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' due to a type confusion bug in the CPython interpreter. An attacker can bypass security restrictions by exploiting the try/except clauses. This is only exploitable if the...

7.9CVSS6.9AI score0.00049EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/01/23 5:19 p.m.17 views

try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

Impact Via a type confusion bug in the CPython interpreter when using try/except RestrictedPython could be bypassed. We believe this should be fixed upstream in Python itself until that we remove support for try/except from RestrictedPython. It has been fixed for some Python versions. Patches...

7.9CVSS6.8AI score0.00049EPSS
Exploits0References4Affected Software1
Debian
Debian
added 2018/09/25 11:47 p.m.51 views

[SECURITY] [DLA 1519-1] python2.7 security update

Package : python2.7 Version : 2.7.9-2+deb8u2 CVE ID : CVE-2017-1000158 CVE-2018-1060 CVE-2018-1061 CVE-2018-1000802 Multiple vulnerabilities were found in the CPython interpreter which can cause denial of service, information gain, and arbitrary code execution. CVE-2017-1000158 CPython aka Python...

9.8CVSS7.1AI score0.26492EPSS
Exploits2
OpenVAS
OpenVAS
added 2018/09/25 12:0 a.m.51 views

Debian: Security Advisory (DLA-1519-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.26492EPSS
Exploits2References3
Rows per page
Query Builder