{"action":"Upgrade zope to 2.10.12 or later.","affected":[{"fixed":"2.10.12","introduced":"2.10.0"},{"fixed":"2.11.7","introduced":"2.11.0"}],"component":"zope","cve_ids":["CVE-2010-3198"],"ecosystem":"PyPI","epss":0.01541,"exploited":false,"fixed_versions":["2.10.12","2.11.7"],"ghsa_id":"GHSA-qh4q-fwf8-qqrw","id":"tcs_01M5KG5DRXP88SDXFSFQHDGAAK","modified_at":"2026-07-09T16:56:21.629765080Z","published_at":"2010-09-08T20:00:00Z","references":["https://osv.dev/vulnerability/PYSEC-2010-32","https://mail.zope.org/pipermail/zope-announce/2010-September/002247.html","http://www.zope.org/Products/Zope/2.10.12/CHANGES.txt","http://www.vupen.com/english/advisories/2010/2275","http://www.securityfocus.com/bid/42939","http://www.zope.org/Products/Zope/2.11.7/CHANGES.txt","https://bugs.launchpad.net/zope2/+bug/627988","https://github.com/advisories/GHSA-qh4q-fwf8-qqrw"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2010-32","url":"https://osv.dev/vulnerability/PYSEC-2010-32"}],"summary":"ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions."}