— PyPI
PYSEC-2021-104 · CVE-2021-32633, CVE-2021-32674 Modified: 11/8/2023
package
PyPI / zope
pkg:pypi/zope
MEDIUM 6.8 PyPI
GHSA-5pr9-v234-jw36 · CVE-2021-32633, CVE-2021-32674 Remote Code Execution via traversal in TAL expressions
Modified: 3/13/2026
HIGH PyPI
GHSA-7944-h5rw-qmjx · CVE-2002-0688 ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Modified: 2/12/2024
MEDIUM PyPI
GHSA-7whr-j8vf-r4wj · CVE-2000-1212 Zope allows attackers to modify raw image and file data
Modified: 11/8/2023
MEDIUM 6.8 PyPI
GHSA-8xv7-89vj-q48c · CVE-2023-41050 Information disclosure in AccessControl
Modified: 2/18/2025
HIGH PyPI
GHSA-9cmq-pj6p-hgwf · CVE-2000-0725 Zope does not properly restrict access to the getRoles method
Modified: 11/8/2023
HIGH PyPI
GHSA-c3rp-4cjh-cp38 · CVE-2002-0170 Zope does not properly verify the access for objects with proxy roles
Modified: 2/12/2024
HIGH 7.5 PyPI
GHSA-g4gq-j4p2-j8fr · CVE-2021-32807, CVE-2021-32811 Remote Code Execution via Script (Python) objects under Python 3
Modified: 2/4/2026
CRITICAL 9.1 PyPI
GHSA-g5vw-3h65-2q3v · CVE-2024-51734 Access control vulnerable to user data deletion by anonynmous users
Modified: 11/5/2024
HIGH PyPI
GHSA-h2xh-jvpf-xq42 · CVE-2000-1211 Zope does not properly perform security registration for legacy names
Modified: 11/8/2023
MEDIUM PyPI
GHSA-j5cc-3h6r-jqh4 · CVE-2000-0483 Zope DocumentTemplate package allows unauthenticated write
Modified: 11/8/2023
LOW 3.1 PyPI
GHSA-m755-gxxg-r5qh · CVE-2023-44389, PYSEC-2023-193 Zope management interface vulnerable to stored cross site scripting via the title property
Modified: 11/19/2024
HIGH 7.5 PyPI
GHSA-qh4q-fwf8-qqrw · CVE-2010-3198, PYSEC-2010-32 Zope Denial of Service (DoS) vulnerability in ZServer
Modified: 5/29/2026
HIGH 8.8 PyPI
GHSA-rpcg-f9q6-2mq6 · CVE-2021-32633, CVE-2021-32674 Remote Code Execution via traversal in TAL expressions
Modified: 2/4/2026
MEDIUM 6.1 PyPI
GHSA-vh6g-786f-hxxp · CVE-2011-4924 Zope XSS Vulnerability
Modified: 2/16/2024
MEDIUM PyPI
GHSA-vwrc-g9q6-f675 · CVE-2002-0687 Zope Server vulnerable to DoS via header injection
Modified: 2/12/2024
HIGH PyPI
GHSA-wcwp-r3fj-mm3p · CVE-2000-0062 Zope DTML implementation Improper Authentication
Modified: 11/8/2023
LOW 3.7 PyPI
GHSA-wm8q-9975-xh5v · CVE-2023-42458 Zope vulnerable to Stored Cross Site Scripting with SVG images
Modified: 2/16/2024
— PyPI
PYSEC-2010-32 · CVE-2010-3198, GHSA-qh4q-fwf8-qqrw Modified: 5/21/2026
— PyPI
PYSEC-2010-33 · CVE-2010-3198, GHSA-qh4q-fwf8-qqrw Modified: 5/19/2026
— PyPI
PYSEC-2021-368 · CVE-2021-32807, CVE-2021-32811 Modified: 11/8/2023
— PyPI
PYSEC-2021-875 · CVE-2021-32807, CVE-2021-32811 Modified: 11/8/2023
— PyPI
PYSEC-2021-88 · CVE-2021-32633, CVE-2021-32674 Modified: 11/8/2023
MEDIUM 4.8 PyPI
PYSEC-2023-193 · CVE-2023-44389, GHSA-m755-gxxg-r5qh Modified: 11/8/2023