MEDIUM6.8PyPI
GHSA-5pr9-v234-jw36· CVE-2021-32633, GHSA-962m-m8jw-8wrrRemote Code Execution via traversal in TAL expressions
Modified: 7/9/2026
package
PyPI/zope
pkg:pypi/zope
HIGHPyPI
GHSA-7944-h5rw-qmjx· CVE-2002-0688, PYSEC-2026-755ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Modified: 7/6/2026
MEDIUMPyPI
GHSA-7whr-j8vf-r4wj· CVE-2000-1212, PYSEC-2026-756Zope allows attackers to modify raw image and file data
Modified: 7/6/2026
MEDIUM6.8PyPI
GHSA-8xv7-89vj-q48c· CVE-2023-41050, PYSEC-2026-2075Information disclosure in AccessControl
Modified: 7/13/2026
HIGHPyPI
GHSA-9cmq-pj6p-hgwf· CVE-2000-0725, PYSEC-2026-757Zope does not properly restrict access to the getRoles method
Modified: 7/6/2026
HIGHPyPI
GHSA-c3rp-4cjh-cp38· CVE-2002-0170, PYSEC-2026-758Zope does not properly verify the access for objects with proxy roles
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-g4gq-j4p2-j8fr· CVE-2021-32811, PYSEC-2021-368Remote Code Execution via Script (Python) objects under Python 3
Modified: 7/9/2026
CRITICAL9.1PyPI
GHSA-g5vw-3h65-2q3v· CVE-2024-51734, PYSEC-2026-2076Access control vulnerable to user data deletion by anonynmous users
Modified: 7/13/2026
HIGHPyPI
GHSA-h2xh-jvpf-xq42· CVE-2000-1211, PYSEC-2026-759Zope does not properly perform security registration for legacy names
Modified: 7/6/2026
MEDIUMPyPI
GHSA-j5cc-3h6r-jqh4· CVE-2000-0483, PYSEC-2026-760Zope DocumentTemplate package allows unauthenticated write
Modified: 7/6/2026
LOW3.1PyPI
GHSA-m755-gxxg-r5qh· CVE-2023-44389, PYSEC-2023-193Zope management interface vulnerable to stored cross site scripting via the title property
Modified: 9/10/2026
MEDIUM4.4PyPI
GHSA-qcx9-j53g-ccgf· CVE-2021-32807, PYSEC-2021-335Remote Code Execution via unsafe classes in otherwise permitted modules
Modified: 7/9/2026
HIGH7.5PyPI
GHSA-qh4q-fwf8-qqrw· CVE-2010-3198, PYSEC-2010-32Zope Denial of Service (DoS) vulnerability in ZServer
Modified: 7/9/2026
HIGH8.8PyPI
GHSA-rpcg-f9q6-2mq6· CVE-2021-32674, GHSA-5vq5-pg3r-9ph3Remote Code Execution via traversal in TAL expressions
Modified: 7/9/2026
MEDIUM6.1PyPI
GHSA-vh6g-786f-hxxp· CVE-2011-4924, PYSEC-2026-3440Zope XSS Vulnerability
Modified: 7/13/2026
MEDIUMPyPI
GHSA-vwrc-g9q6-f675· CVE-2002-0687, PYSEC-2026-761Zope Server vulnerable to DoS via header injection
Modified: 7/6/2026
HIGHPyPI
GHSA-wcwp-r3fj-mm3p· CVE-2000-0062, PYSEC-2026-762Zope DTML implementation Improper Authentication
Modified: 7/6/2026
LOW3.7PyPI
GHSA-wm8q-9975-xh5v· CVE-2023-42458, PYSEC-2026-2077Zope vulnerable to Stored Cross Site Scripting with SVG images
Modified: 9/10/2026
—PyPI
PYSEC-2010-32· CVE-2010-3198, GHSA-qh4q-fwf8-qqrwModified: 7/9/2026
—PyPI
PYSEC-2021-104· CVE-2021-32674, GHSA-5vq5-pg3r-9ph3Modified: 7/9/2026
—PyPI
PYSEC-2021-368· CVE-2021-32811, GHSA-g4gq-j4p2-j8frModified: 7/9/2026
—PyPI
PYSEC-2021-875· CVE-2021-32807, GHSA-qcx9-j53g-ccgfModified: 7/9/2026
—PyPI
PYSEC-2021-88· CVE-2021-32633, GHSA-5pr9-v234-jw36Modified: 7/9/2026
MEDIUM4.8PyPI
PYSEC-2023-193· CVE-2023-44389, GHSA-m755-gxxg-r5qhModified: 11/8/2023
MEDIUM6.8PyPI
PYSEC-2026-2075· CVE-2023-41050, GHSA-8xv7-89vj-q48cInformation disclosure in AccessControl
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-2076· CVE-2024-51734, GHSA-g5vw-3h65-2q3vAccess control vulnerable to user data deletion by anonynmous users
Modified: 7/13/2026
LOW3.7PyPI
PYSEC-2026-2077· CVE-2023-42458, GHSA-wm8q-9975-xh5vZope vulnerable to Stored Cross Site Scripting with SVG images
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-3440· CVE-2011-4924, GHSA-vh6g-786f-hxxpZope XSS Vulnerability
Modified: 7/13/2026
—PyPI
PYSEC-2026-755· CVE-2002-0688, GHSA-7944-h5rw-qmjxZCatalog plug-in for Zope allows anonymous users to bypass access restrictions
Modified: 7/6/2026
—PyPI
PYSEC-2026-756· CVE-2000-1212, GHSA-7whr-j8vf-r4wjZope allows attackers to modify raw image and file data
Modified: 7/6/2026
—PyPI
PYSEC-2026-757· CVE-2000-0725, GHSA-9cmq-pj6p-hgwfZope does not properly restrict access to the getRoles method
Modified: 7/6/2026
—PyPI
PYSEC-2026-758· CVE-2002-0170, GHSA-c3rp-4cjh-cp38Zope does not properly verify the access for objects with proxy roles
Modified: 7/6/2026
—PyPI
PYSEC-2026-759· CVE-2000-1211, GHSA-h2xh-jvpf-xq42Zope does not properly perform security registration for legacy names
Modified: 7/6/2026
—PyPI
PYSEC-2026-760· CVE-2000-0483, GHSA-j5cc-3h6r-jqh4Zope DocumentTemplate package allows unauthenticated write
Modified: 7/6/2026
—PyPI
PYSEC-2026-761· CVE-2002-0687, GHSA-vwrc-g9q6-f675Zope Server vulnerable to DoS via header injection
Modified: 7/6/2026
—PyPI
PYSEC-2026-762· CVE-2000-0062, GHSA-wcwp-r3fj-mm3pZope DTML implementation Improper Authentication
Modified: 7/6/2026