HIGH7.5PyPI
GHSA-5rfv-66g4-jr8h· CVE-2024-47532, PYSEC-2024-186RestrictedPython information leakage via `AttributeError.obj` and the `string` module
Modified: 1/21/2025
package
PyPI/restrictedpython
pkg:pypi/restrictedpython
HIGH8.3PyPI
GHSA-ffg3-p8fm-mjx2· CVE-2026-55830, PYSEC-2026-3917RestrictedPython guard hooks can be shadowed via positional-only arguments
Modified: 9/10/2026
HIGH7.9PyPI
GHSA-gmj9-h825-chq2· CVE-2025-22153, PYSEC-2026-1874try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Modified: 7/7/2026
HIGH8.4PyPI
GHSA-hp3v-5vw7-fx9w· CVE-2026-76825, PYSEC-2026-4161RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution
Modified: 10/1/2026
HIGH8.4PyPI
GHSA-wqc8-x2pr-7jqh· CVE-2023-37271, PYSEC-2023-118RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Modified: 9/10/2026
HIGH8.3PyPI
GHSA-xjw2-6jm9-rf67· CVE-2023-41039, PYSEC-2023-159Sandbox escape via various forms of "format".
Modified: 2/16/2024
CRITICAL9.9PyPI
PYSEC-2023-118· CVE-2023-37271, GHSA-wqc8-x2pr-7jqhModified: 11/8/2023
HIGH7.7PyPI
PYSEC-2023-159· CVE-2023-41039, GHSA-xjw2-6jm9-rf67Modified: 11/8/2023
MEDIUM6.5PyPI
PYSEC-2024-186· CVE-2024-47532, GHSA-5rfv-66g4-jr8hModified: 1/19/2025
HIGH7.9PyPI
PYSEC-2026-1874· CVE-2025-22153, GHSA-gmj9-h825-chq2try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Modified: 7/7/2026
HIGH8.3PyPI
PYSEC-2026-3917· CVE-2026-55830, GHSA-ffg3-p8fm-mjx2RestrictedPython guard hooks can be shadowed via positional-only arguments
Modified: 9/10/2026
HIGH8.4PyPI
PYSEC-2026-4161· CVE-2026-76825, GHSA-hp3v-5vw7-fx9wRestrictedPython vulnerable to sandbox escape via string.Formatter field resolution
Modified: 10/1/2026