aimmo (>=0.4.0b3098, <=0.27.4b5229), codeforlife-portal (>=1.1.1, <=1.2.1) potentially affected by CVE-2024-47532 via restrictedpython (4.0.0b7)

restrictedpython PYPI version 4.0.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - aimmo =0.4.0b3098, =1.1.1, =1.2.1 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

UBUNTU-CVE-2024-47532

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

CVE-2024-47532

CVE-2024-47532 affects RestrictedPython, a Python restricted-execution environment. The issue allows indirect access to protected information via AttributeError.obj and the string module. Fixed in RestrictedPython version 7.3. Workarounds include removing the string module from RestrictedPython.U...

a2grunnerp (>=0.1.0, <=0.1.8), aimmo (>=0.4.0b3098, <=0.27.4b5229) +42 more potentially affected by CVE-2024-47532 via restrictedpython (>=4.0.0b4, <=7.2.0)

restrictedpython PYPI version =4.0.0b4, =0.1.0, =0.4.0b3098, =0.1.1, =1.0.0, =1.0.1, =0.1.1, =1.1.1, =2.0.0b4, =0.1.0, =0.3.4, =0.0.41a1, =0.5.2, =0.11.1 and more Source cves: CVE-2024-47532 Source advisory: MEND:CVE-2024-47532...

CVE-2024-47532

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

CVE-2024-47532 RestrictedPython information leakage via `AttributeError.obj` and the `string` module

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

PT-2024-32646

Name of the Vulnerable Software and Affected Versions RestrictedPython versions prior to 7.3 Description A user can gain access to protected information indirectly via AttributeError.obj and the string module. This issue allows unauthorized access to potentially sensitive information...

RestrictedPython information leakage vulnerability

RestrictedPython is a Zope open source tool that helps define a subset of the Python language that allows program input to be provided to a trusted environment. An information disclosure vulnerability exists in RestrictedPython versions prior to 7.3. An attacker exploiting this vulnerability coul...

CVE-2024-47532: Exposure of Sensitive Information to an Unauthorized Actor

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...

GHSA-8XV7-89VJ-Q48C Information disclosure in AccessControl

Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

Information disclosure in AccessControl

Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

Information Disclosure

RestrictedPython is vulnerable to Information Disclosure. The vulnerability arises due to the format functionality in Python which allows someone controlling the format string to "read" data from objects, including sensitive information. This vulnerability could potentially allow an attacker to...

GHSA-XJW2-6JM9-RF67 Sandbox escape via various forms of "format".

Impact Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to critical information disclosure. With RestrictedPython, the format functionality is...

aimmo (>=0.4.0b3098, <=0.27.4b5229), codeforlife-portal (>=1.1.1, <=1.2.1) potentially affected by CVE-2023-41039 via restrictedpython (4.0.0b7)

restrictedpython PYPI version 4.0.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - aimmo =0.4.0b3098, =1.1.1, =1.2.1 Source cves: CVE-2023-41039 Source advisory: OSV:GHSA-XJW2-6JM9-RF67...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +3 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0, <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2023-41039 Source advisory: OSV:GHSA-XJW2-6JM9-RF67...

a2grunnerp (>=0.1.0, <=0.1.8), dothttp-req (>=0.0.42a3, <=0.0.42a10) +3 more potentially affected by CVE-2023-41039 via restrictedpython (>=6.0.0, <=6.1.0)

restrictedpython PYPI version =6.0.0, =0.1.0, =0.0.42a3, =2.10.0, =2025.9.5, =2025.12.1 Source cves: CVE-2023-41039 Source advisory: GHSA-XJW2-6JM9-RF67...

dektools (>=0.1.0, <=0.1.117), dimensigon (>=0.3.4, <=0.3.5) +2 more potentially affected by CVE-2023-41039 via restrictedpython (>=5.0.0, <=5.2.0)

restrictedpython PYPI version =5.0.0, =0.1.0, =0.3.4, =0.0.41a1, =0.1047.0, =1.7.36 Source cves: CVE-2023-41039 Source advisory: GHSA-XJW2-6JM9-RF67...

dektools (>=0.1.0, <=0.1.117), dimensigon (>=0.3.4, <=0.3.5) +2 more potentially affected by CVE-2023-41039 via restrictedpython (>=5.0.0, <=5.2.0)

restrictedpython PYPI version =5.0.0, =0.1.0, =0.3.4, =0.0.41a1, =0.1047.0, =1.7.36 Source cves: CVE-2023-41039 Source advisory: OSV:GHSA-XJW2-6JM9-RF67...