17 matches found
PYSEC-2026-3533 PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
Summary The executecode tool's subprocess sandbox advertises a three-layer defense AST validation, text-pattern blocklist, restricted builtins. In sandbox mode the default only two layers are active — the text-pattern blocklist is skipped — and both remaining layers are bypassed by combining two...
PT-2026-64135
Summary The execute code tool's subprocess sandbox advertises a three-layer defense AST validation, text-pattern blocklist, restricted builtins . In sandbox mode the default only two layers are active — the text-pattern blocklist is skipped — and both remaining layers are bypassed by combining tw...
PYSEC-2026-2325 Information disclosure in AccessControl
Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
CVE-2026-59876 protobufjs: Text Format string map parsing can mutate returned map object prototype
protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key proto to change the prototype of the returned map object instead of...
Information disclosure in AccessControl
ImpactPython's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
PT-2026-53145
Summary The execute code tool's subprocess sandbox advertises a three-layer defense AST validation, text-pattern blocklist, restricted builtins . In sandbox mode the default only two layers are active — the text-pattern blocklist is skipped — and both remaining layers are bypassed by combining tw...
PT-2025-12224
Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.22.0 Description The AimQL query language in aimhubio/aim uses an outdated version of the safer getattr function from RestrictedPython, which does not protect against the str.format map method. This allows an attacker to...
CVE-2019-10906
...
PT-2023-27762
Name of the Vulnerable Software and Affected Versions AccessControl versions prior to 4.4 AccessControl versions prior to 5.8 AccessControl versions prior to 6.2 Description The issue arises from Python's "format" functionality, which allows someone controlling the format string to access objects...
PT-2023-27754
Name of the Vulnerable Software and Affected Versions RestrictedPython versions prior to 5.4 RestrictedPython versions prior to 6.2 Description Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and...
SUSE CVE-2019-10906
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
GHSA-462W-V97R-4M45 Jinja2 sandbox escape via string formatting
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape. The sandbox is used to restrict what code can be evaluated when rendering untrusted, user-provided templates. Due to the way string formatting works in Python, the str.formatmap method could be used to escape the sandbox. This...
PYSEC-2019-217
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
PYSEC-2019-217
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
DEBIAN-CVE-2019-10906
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
UBUNTU-CVE-2019-10906
In Pallets Jinja before 2.10.1, str.formatmap allows a sandbox escape...
Scientific Linux Security Update : autofs on SL6.x i386/x86_64 (20150722)
It was found that program-based automounter maps that used interpreted languages such as Python would use standard environment variables to locate and load modules of those languages. A local attacker could potentially use this flaw to escalate their privileges on the system. CVE-2014-8169 Note:...