CVE-2024-47532

CVE-2024-47532 affects RestrictedPython, a Python restricted-execution environment. The issue allows indirect access to protected information via AttributeError.obj and the string module. Fixed in RestrictedPython version 7.3. Workarounds include removing the string module from RestrictedPython.U...

CVE-2023-37271

CVE-2023-37271 concerns RestrictedPython, a tool for sandboxing Python code. The vulnerability arises because RestrictedPython does not sanitize access to stack frames, allowing code inside generators/generator expressions to access the current stack frame and walk the stack beyond the sandbox bo...

CVE-2023-41039

CVE-2023-41039 affects RestrictedPython. The issue stems from Python’s string format/format_map inside RestrictedPython enabling a format string controller to read objects via recursive attribute lookup and subscription, causing potential information disclosure. All known RestrictedPython version...