https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:17:44.481092+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-190267 EUVD-2026-190267 2026-10-03T06:17:44.492437+00:00 EUVD-2026-190267 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47532 fkie_cve-2024-47532 2026-10-03T06:17:44.492507+00:00

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.

 https://cve.radiocsirt.org/vuln/ghsa-5rfv-66g4-jr8h GHSA-5rfv-66g4-jr8h — RestrictedPython information leakage via `AttributeError.obj` and the `string` module 2026-10-03T06:17:44.492577+00:00

Affected: PyPI: RestrictedPython

### Impact A user can gain access to protected (and potentially sensible) information indirectly via `AttributeError.obj` and the `string` module.

### Patches The problem will be fixed in version 7.3.

### Workarounds If the application does not require access to the module `string`, it can remove it from `RestrictedPython.Utilities.utility_builtins` or otherwise do not make it available in the restricted execution environment.

 https://cve.radiocsirt.org/vuln/pysec-2024-186 PYSEC-2024-186 2026-10-03T06:17:44.492638+00:00

Affected: PyPI: restrictedpython

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-47532 UBUNTU-CVE-2024-47532 2026-10-03T06:17:44.492683+00:00

Affected: Ubuntu:Pro:20.04:LTS: restrictedpython, Ubuntu:Pro:22.04:LTS: restrictedpython, Ubuntu:Pro:24.04:LTS: restrictedpython

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.