PyPI/restrictedpython CVE-2025-22153: high 7.9, EPSS 0.40%
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Action: Upgrade restrictedpython to 8.0 or later.
pip install restrictedpython==8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.0 | 8.0 | - |
Fixed versions
| 8.0 |
Sources
- osv: GHSA-gmj9-h825-chq2
- https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2
- https://nvd.nist.gov/vuln/detail/CVE-2025-22153
- https://github.com/zopefoundation/RestrictedPython/commit/48a92c5bb617a647cffd0dadd4d5cfe626bcdb2f
- https://github.com/zopefoundation/RestrictedPython
CVE-2025-22153 · published · modified · JSON