Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-0229

Malicious code in bioql PyPI...

8.3CVSS7.9AI score0.00219EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-0228

Malicious code in bioql PyPI...

9.9CVSS9.1AI score0.00347EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 4:3 a.m.6 views

CVE-2023-37271

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. RestrictedPython does not check access to stack frames and their attributes. Stack frames are accessible within at least generators and generat...

9.9CVSS7.2AI score0.00347EPSS
Exploits0References1
Veracode
Veracode
added 2025/01/29 2:31 a.m.11 views

Sandbox Escape

restrictedpython is vulnerable to Sandbox Escape. The vulnerability is due to a type confusion bug in CPython when using try/except, which allows an attacker to bypass the security restrictions in RestrictedPython...

7.9CVSS7.6AI score0.00049EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2025/01/23 5:19 p.m.0 views

a2grunnerp (>=0.1.0 <=0.1.8), agora-protocol (=0.2.0) +40 more potentially affected by CVE-2025-22153 via restrictedpython (>=6.0.0 <=7.4.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =1.4.14, =0.1.1, =0.1.5, =0.1.0, =2.0.0b4, =0.38.0, =0.0.86, =0.0.42, =0.1.0, =0.1.24, =1.0.8 and more Source cves: CVE-2025-22153 Source advisory: SNYK:PYTHON-RESTRICTEDPYTHON-8660824...

7.9CVSS5.8AI score0.00049EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2024/09/30 5:14 p.m.1 views

a2grunnerp (>=0.1.0 <=0.1.8), aimmo (>=0.4.0b3098 <=0.27.4b5229) +42 more potentially affected by CVE-2024-47532 via restrictedpython (>=4.0.0b4 <=7.2.0)

restrictedpython PYPI version =4.0.0b4, =0.1.0, =0.4.0b3098, =0.1.1, =1.0.0, =1.0.1, =0.1.1, =1.1.1, =2.0.0b4, =0.1.0, =0.3.4, =0.0.41, =0.1.0, =2.10.0, =2.19.0rc8 and more Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

8.7CVSS5.8AI score0.01117EPSS
Exploits1
NVD
NVD
added 2023/08/30 6:15 p.m.13 views

CVE-2023-41039

RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to...

8.3CVSS8.2AI score0.00219EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2023/07/10 9:53 p.m.2 views

a2grunnerp (>=0.1.0 <=0.1.8), dcicsnovault (>=2.0.0b4 <=2.0.0b7) +5 more potentially affected by CVE-2023-37271 via restrictedpython (>=6.0.0 <=6.0.0a1.dev0)

restrictedpython PYPI version =6.0.0, =0.1.0, =2.0.0b4, =0.0.42a3, =2.10.0, =2025.9.5, =4.8.4, =4.8.11 Source cves: CVE-2023-37271 Source advisory: OSV:GHSA-WQC8-X2PR-7JQH...

9.9CVSS7.2AI score0.00347EPSS
Exploits0
Rows per page
Query Builder