PyPI/restrictedpython CVE-2023-41039: high 8.3, EPSS 0.68%

Sandbox escape via various forms of "format".

Action: Upgrade restrictedpython to 5.4 or later.

pip install restrictedpython==5.4

pip install restrictedpython==6.2

Affected

Fixed versions

Sources

• osv: GHSA-xjw2-6jm9-rf67
• https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-xjw2-6jm9-rf67
• https://nvd.nist.gov/vuln/detail/CVE-2023-41039
• https://github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120
• https://github.com/zopefoundation/RestrictedPython

CVE-2023-41039 · published 2023-08-30T20:47:58Z · modified 2024-02-16T08:18:58.766349Z · JSON