dothttp-req (>=0.0.43a14, <=0.0.43a17), dynamiq (>=0.5.2, <=0.11.1) potentially affected by CVE-2026-76825 via restrictedpython (7.1.0)

restrictedpython PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a14, =0.5.2, =0.11.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

bgq (>=0.1.1, <=0.1.7), criscostack (1.0.0) +14 more potentially affected by CVE-2026-76825 via restrictedpython (6.2.0)

restrictedpython PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - bgq =0.1.1, =0.0.42a11, =0.1.11, =1.1.0, =0.1.0, =0.1.0, =0.0.3, =3.1.2, =0.1.1, =0.0.11, =0.0.2, =0.0.3 and more Source cves:...

aurapro-ui (>=3.1.0, <=3.9.3), aurapro-webui (>=3.9.11, <=3.10.4) +15 more potentially affected by CVE-2026-76825 via restrictedpython (>=8.0.0, <=8.3.0)

restrictedpython PYPI version =8.0.0, =3.1.0, =3.9.11, =0.167.1, =0.0.44a26, =0.12.0, =0.2.1, =0.7.15, =0.5.17, =10.0.9, =0.166.0, =0.167.0 - pycurity 0.0.1 - pytest-canvas 0.1.0 and more Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2026-76825 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

krakenci-server (>=0.1047.0, <=1.7.36) potentially affected by CVE-2026-76825 via restrictedpython (5.0.0)

restrictedpython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - krakenci-server =0.1047.0, =1.7.36 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

PYSEC-2026-4161 RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

Impact RestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code. string.Formatter field resolution methods such as getfield can perform attribute and item traversal internally and return live...

dimensigon (>=0.3.4, <=0.3.5) potentially affected by CVE-2026-76825 via restrictedpython (5.1.0)

restrictedpython PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dimensigon =0.3.4, =0.3.5 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

dcicsnovault (>=2.0.0b4, <=2.0.0b7), moksh-orchestrator (0.2.1) +1 more potentially affected by CVE-2026-76825 via restrictedpython (6.0.0a1.dev0)

restrictedpython PYPI version 6.0.0a1.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dcicsnovault =2.0.0b4, =4.8.4, =4.8.11 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

llm-toys (0.1.1) potentially affected by CVE-2026-76825 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

agora-protocol (0.2.0), athina (>=1.6.24, <=1.6.33) +14 more potentially affected by CVE-2026-76825 via restrictedpython (7.4.0)

restrictedpython PYPI version 7.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - agora-protocol 0.2.0 - athina =1.6.24, =0.1.5, =0.1.0, =0.38.0, =0.0.86, =0.0.43a23, =0.1.24, =0.2.0, =0.2.0, =0.3.2 and more...

blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +3 more potentially affected by CVE-2026-76825 via restrictedpython (7.0.0)

restrictedpython PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - blixa 1.1.4 - dothttp-insomnia-importer 0.1.0 - dothttp-req =0.0.43a2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2026-76825...

dothttp-req (>=0.0.43a19, <=0.0.43a20) potentially affected by CVE-2026-76825 via restrictedpython (7.2.0)

restrictedpython PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a19, =0.0.43a20 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

battlehack20 (>=1.0.0, <=1.1.0), battlehack20-fancyviewer (>=1.0.1, <=1.0.5) potentially affected by CVE-2026-76825 via restrictedpython (4.0.0b4)

restrictedpython PYPI version 4.0.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - battlehack20 =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

aimmo (>=0.4.0b3098, <=0.27.4b5229), codeforlife-portal (>=1.1.1, <=1.2.1) potentially affected by CVE-2026-76825 via restrictedpython (4.0.0b7)

restrictedpython PYPI version 4.0.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - aimmo =0.4.0b3098, =1.1.1, =1.2.1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

ImpactRestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code.string.Formatter field resolution methods such as getfield can perform attribute and item traversal internally and return live...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2026-76825 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2026-768...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2026-76825 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2026-76825 Source advisory: OSV:PYSEC-2026-4161...

PT-2026-105905

Impact RestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code. string.Formatter field resolution methods such as get field can perform attribute and item traversal internally and return live...

Linux Distros Unpatched Vulnerability : CVE-2026-55830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3...

dothttp-req (>=0.0.43a14, <=0.0.43a17), dynamiq (>=0.5.2, <=0.11.1) potentially affected by CVE-2026-76825 via restrictedpython (7.1.0)

restrictedpython PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dothttp-req =0.0.43a14, =0.5.2, =0.11.1 Source cves: CVE-2026-76825 Source advisory: OSV:GHSA-HP3V-5VW7-FX9W...