https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:34:17.577454+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-47532 CVE-2024-47532 — RestrictedPython information leakage via `AttributeError.obj` and the `string` module 2026-10-03T00:34:17.579478+00:00

Affected: zopefoundation RestrictedPython, zope restrictedpython

RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application does not require access to the module string, it can remove it from RestrictedPython.Utilities.utility_builtins or otherwise do not make it available in the restricted execution environment.

 https://cve.radiocsirt.org/vuln/ghsa-5rfv-66g4-jr8h GHSA-5rfv-66g4-jr8h — RestrictedPython information leakage via `AttributeError.obj` and the `string` module 2026-10-03T00:34:17.579558+00:00

Affected: PyPI: RestrictedPython

### Impact A user can gain access to protected (and potentially sensible) information indirectly via `AttributeError.obj` and the `string` module.

### Patches The problem will be fixed in version 7.3.

### Workarounds If the application does not require access to the module `string`, it can remove it from `RestrictedPython.Utilities.utility_builtins` or otherwise do not make it available in the restricted execution environment.