PyPI/restrictedpython CVE-2023-41039: high 7.7, EPSS 0.68%
RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible t
Action: Upgrade restrictedpython to 5.4 or later.
pip install restrictedpython==6.2pip install restrictedpython==5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.4 | - |
| 6.0 | 6.2 | - |
Fixed versions
| 6.2 | 5.4 |
Sources
- osv: PYSEC-2023-159
- https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-xjw2-6jm9-rf67
- https://github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120
CVE-2023-41039 · published · modified · JSON