{"action":"Upgrade restrictedpython to 5.4 or later.","affected":[{"fixed":"5.4","introduced":"0"},{"fixed":"6.2","introduced":"6.0"}],"component":"restrictedpython","cve_ids":["CVE-2023-41039"],"ecosystem":"PyPI","epss":0.00683,"exploited":false,"fixed_versions":["5.4","6.2"],"ghsa_id":"GHSA-xjw2-6jm9-rf67","id":"tcs_01M5KG4BR029YXBATVK1YCY03T","modified_at":"2024-02-16T08:18:58.766349Z","published_at":"2023-08-30T20:47:58Z","references":["https://osv.dev/vulnerability/GHSA-xjw2-6jm9-rf67","https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-xjw2-6jm9-rf67","https://nvd.nist.gov/vuln/detail/CVE-2023-41039","https://github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120","https://github.com/zopefoundation/RestrictedPython"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-xjw2-6jm9-rf67","url":"https://osv.dev/vulnerability/GHSA-xjw2-6jm9-rf67"}],"summary":"Sandbox escape via various forms of \"format\"."}