https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:15:03 +0000 https://cve.radiocsirt.org/vuln/cve-2023-41039 <p><strong>Affected:</strong> zopefoundation RestrictedPython</p> <p>RestrictedPython is a restricted execution environment for Python to run untrusted code. Python&#39;s &#34;format&#34; functionality allows someone controlling the format string to &#34;read&#34; all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to critical information disclosure. With `RestrictedPython`, the format functionality is available via the `format` and `format_map` methods of `str` (and `unicode`) (accessed either via the class or its instances) and via `string.Formatter`. All known versions of `RestrictedPython` are vulnerable. This issue has been addressed in commit `4134aedcff1` which has been included in the 5.4 and 6.2 releases. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> zopefoundation RestrictedPython</p> <p>RestrictedPython is a restricted execution environment for Python to run untrusted code. Python&#39;s &#34;format&#34; functionality allows someone controlling the format string to &#34;read&#34; all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to critical information disclosure. With `RestrictedPython`, the format functionality is available via the `format` and `format_map` methods of `str` (and `unicode`) (accessed either via the class or its instances) and via `string.Formatter`. All known versions of `RestrictedPython` are vulnerable. This issue has been addressed in commit `4134aedcff1` which has been included in the 5.4 and 6.2 releases. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/cve-2023-41039