109 matches found
DEBIAN-CVE-2025-22153
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
UBUNTU-CVE-2025-22153
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
CVE-2025-22153 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
CVE-2025-22153
CVE-2025-22153 describes a type-confusion vulnerability in RestrictedPython exploitable via CPython 3.11–3.12 when using try/except*. The flaw allows bypassing RestrictedPython protections in versions 6.0 up to, but not including, 8.0. The fix is in RestrictedPython 8.0, which removes support for...
CVE-2025-22153 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
CVE-2025-22153
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
CVE-2025-22153 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Via a type confusion bug in versions of the CPython interpreter starting in 3.11 and prior to 3.13.2 when using try/except, RestrictedPython starting...
a2grunnerp (>=0.1.0 <=0.1.8), agora-protocol (=0.2.0) +40 more potentially affected by CVE-2025-22153 via restrictedpython (>=6.0.0 <=7.4.0)
restrictedpython PYPI version =6.0.0, =0.1.0, =1.5.19, =0.1.1, =0.1.5, =0.1.0, =2.0.0b4, =0.38.0, =0.0.86, =0.0.42, =0.1.0, =0.1.24, =1.0.8 and more Source cves: CVE-2025-22153 Source advisory: OSV:GHSA-GMJ9-H825-CHQ2...
a2grunnerp (>=0.1.0 <=0.1.8), agora-protocol (=0.2.0) +40 more potentially affected by CVE-2025-22153 via restrictedpython (>=6.0.0 <=7.4.0)
restrictedpython PYPI version =6.0.0, =0.1.0, =1.5.19, =0.1.1, =0.1.5, =0.1.0, =2.0.0b4, =0.38.0, =0.0.86, =0.0.42, =0.1.0, =0.1.24, =1.0.8 and more Source cves: CVE-2025-22153 Source advisory: SNYK:PYTHON-RESTRICTEDPYTHON-8660824...
GHSA-GMJ9-H825-CHQ2 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Impact Via a type confusion bug in the CPython interpreter when using try/except RestrictedPython could be bypassed. We believe this should be fixed upstream in Python itself until that we remove support for try/except from RestrictedPython. It has been fixed for some Python versions. Patches...
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Impact Via a type confusion bug in the CPython interpreter when using try/except RestrictedPython could be bypassed. We believe this should be fixed upstream in Python itself until that we remove support for try/except from RestrictedPython. It has been fixed for some Python versions. Patches...
Access of Resource Using Incompatible Type ('Type Confusion')
Overview RestrictedPython is a RestrictedPython is a defined subset of the Python language which allows to provide a program input into a trusted environment. Affected versions of this package are vulnerable to Access of Resource Using Incompatible Type 'Type Confusion' due to a type confusion bu...
RestrictedPython 安全漏洞
RestrictedPython is an open source tool from Zope that helps define a subset of the Python language that allows program input to be provided to a trusted environment. A security vulnerability exists in RestrictedPython that stems from a type confusion error when using "try/except"...
Information Disclosure
RestrictedPython is vulnerable to Information Disclosure. The vulnerability is due to the combination of the AttributeError.obj and the string module, which allows unauthorized access to sensitive information within the RestrictedPython execution environment...
a2grunnerp (>=0.1.0 <=0.1.8), aimmo (>=0.4.0b3098 <=0.27.4b5229) +42 more potentially affected by CVE-2024-47532 via restrictedpython (>=4.0.0b4 <=7.2.0)
restrictedpython PYPI version =4.0.0b4, =0.1.0, =0.4.0b3098, =0.1.1, =1.0.0, =1.0.1, =0.1.1, =1.1.1, =2.0.0b4, =0.1.0, =0.3.4, =0.0.41, =0.1.0, =2.10.0, =2.18.0 and more Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...
GHSA-5RFV-66G4-JR8H RestrictedPython information leakage via `AttributeError.obj` and the `string` module
Impact A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. Patches The problem will be fixed in version 7.3. Workarounds If the application does not require access to the module string, it can remove it from...
DEBIAN-CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
a2grunnerp (>=0.1.0 <=0.1.8), aimmo (>=0.4.0b3098 <=0.27.4b5229) +42 more potentially affected by CVE-2024-47532 via restrictedpython (>=4.0.0b4 <=7.2.0)
restrictedpython PYPI version =4.0.0b4, =0.1.0, =0.4.0b3098, =0.1.1, =1.0.0, =1.0.1, =0.1.1, =1.1.1, =2.0.0b4, =0.1.0, =0.3.4, =0.0.41, =0.1.0, =2.10.0, =2.18.0 and more Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...
PYSEC-2024-186
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...
CVE-2024-47532
RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected and potentially sensible information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application...