bgq (>=0.1.1, <=0.1.7), criscostack (1.0.0) +14 more potentially affected by CVE-2024-47532 via restrictedpython (6.2.0)

restrictedpython PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - bgq =0.1.1, =0.0.42a11, =0.1.11, =1.1.0, =0.1.0, =0.1.0, =0.0.3, =3.1.2, =0.1.1, =0.0.11, =0.0.2, =0.0.3 and more Source cves:...

GHSA-5RFV-66G4-JR8H RestrictedPython information leakage via `AttributeError.obj` and the `string` module

Impact A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. Patches The problem will be fixed in version 7.3. Workarounds If the application does not require access to the module string, it can remove it from...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2024-47532 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2024-47532 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2024-475...

dimensigon (>=0.3.4, <=0.3.5) potentially affected by CVE-2024-47532 via restrictedpython (5.1.0)

restrictedpython PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dimensigon =0.3.4, =0.3.5 Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

llm-toys (0.1.1) potentially affected by CVE-2024-47532 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +4 more potentially affected by CVE-2024-47532 via restrictedpython (>=7.0.0, <=7.2.0)

restrictedpython PYPI version =7.0.0, =0.0.43a2, =0.5.2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

dektools (>=0.1.0, <=0.1.117), dothttp-req (>=0.0.41a1, <=0.0.42a1) potentially affected by CVE-2024-47532 via restrictedpython (5.2.0)

restrictedpython PYPI version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dektools =0.1.0, =0.0.41a1, =0.0.42a1 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

PYSEC-2024-186

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

artificienlib (>=0.1.1, <=0.1.6), syft (>=0.2.8, <=0.2.9) +8 more potentially affected by CVE-2024-47532 via restrictedpython (5.4.0)

restrictedpython PYPI version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - artificienlib =0.1.1, =0.2.8, =0.0.333, =0.0.27, =0.0.70, =0.0.126, =0.0.31, =0.0.30, =0.0.14, =0.0.26 Source cves: CVE-2024-475...

krakenci-server (>=0.1047.0, <=1.7.36) potentially affected by CVE-2024-47532 via restrictedpython (5.0.0)

restrictedpython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - krakenci-server =0.1047.0, =1.7.36 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +2 more potentially affected by CVE-2024-47532 via restrictedpython (6.0.0)

restrictedpython PYPI version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - a2grunnerp =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

llm-toys (0.1.1) potentially affected by CVE-2024-47532 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

dcicsnovault (>=2.0.0b4, <=2.0.0b7), moksh-orchestrator (0.2.1) +1 more potentially affected by CVE-2024-47532 via restrictedpython (6.0.0a1.dev0)

restrictedpython PYPI version 6.0.0a1.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dcicsnovault =2.0.0b4, =4.8.4, =4.8.11 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

bgq (>=0.1.1, <=0.1.7), criscostack (1.0.0) +14 more potentially affected by CVE-2024-47532 via restrictedpython (6.2.0)

restrictedpython PYPI version 6.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - bgq =0.1.1, =0.0.42a11, =0.1.11, =1.1.0, =0.1.0, =0.1.0, =0.0.3, =3.1.2, =0.1.1, =0.0.11, =0.0.2, =0.0.3 and more Source cves:...

DEBIAN-CVE-2024-47532

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

battlehack20 (>=1.0.0, <=1.1.0), battlehack20-fancyviewer (>=1.0.1, <=1.0.5) potentially affected by CVE-2024-47532 via restrictedpython (4.0.0b4)

restrictedpython PYPI version 4.0.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - battlehack20 =1.0.0, =1.0.1, =1.0.5 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

blixa (1.1.4), dothttp-insomnia-importer (0.1.0) +4 more potentially affected by CVE-2024-47532 via restrictedpython (>=7.0.0, <=7.2.0)

restrictedpython PYPI version =7.0.0, =0.0.43a2, =0.5.2, =0.0.5rc1, =0.8.5b2, =0.9.6b6 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

CVE-2024-47532

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

dimensigon (>=0.3.4, <=0.3.5) potentially affected by CVE-2024-47532 via restrictedpython (5.1.0)

restrictedpython PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - dimensigon =0.3.4, =0.3.5 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...