{"action":"Upgrade restrictedpython to 8.0 or later.","affected":[{"fixed":"8.0","introduced":"6.0"}],"component":"restrictedpython","cve_ids":["CVE-2025-22153"],"ecosystem":"PyPI","epss":0.004,"exploited":false,"fixed_versions":["8.0"],"ghsa_id":"GHSA-gmj9-h825-chq2","id":"tcs_01M5KGW6FWT4S6NKGQ65WJDCVG","modified_at":"2026-07-07T17:46:36.748663368Z","published_at":"2026-07-07T14:34:49.069993Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1874","https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2","https://nvd.nist.gov/vuln/detail/CVE-2025-22153","https://github.com/zopefoundation/RestrictedPython/commit/48a92c5bb617a647cffd0dadd4d5cfe626bcdb2f","https://github.com/zopefoundation/RestrictedPython","https://pypi.org/project/restrictedpython","https://github.com/advisories/GHSA-gmj9-h825-chq2"],"severity":{"label":"high","score":7.9},"sources":[{"source":"osv","source_id":"PYSEC-2026-1874","url":"https://osv.dev/vulnerability/PYSEC-2026-1874"}],"summary":"try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter"}