CVE-2024-47532

CVE-2024-47532 affects RestrictedPython, a Python restricted-execution environment. The issue allows indirect access to protected information via AttributeError.obj and the string module. Fixed in RestrictedPython version 7.3. Workarounds include removing the string module from RestrictedPython.U...

CVE-2023-41039

CVE-2023-41039 affects RestrictedPython. The issue stems from Python’s string format/format_map inside RestrictedPython enabling a format string controller to read objects via recursive attribute lookup and subscription, causing potential information disclosure. All known RestrictedPython version...