What’s Vulnerable › Products

zopefoundation RestrictedPython vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your zopefoundation RestrictedPython version is affected

Latest zopefoundation RestrictedPython vulnerabilities

• CVE-2026-76825 — RestrictedPython: Sandbox escape via string.Formatter field resolution (CVSS 8.4)
• CVE-2026-55830 — RestrictedPython guard hooks can be shadowed via positional-only arguments (CVSS 8.3)
• CVE-2025-22153 — try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter (CVSS 7.9)
• CVE-2024-47532 — RestrictedPython information leakage via `AttributeError.obj` and the `string` module (CVSS 6.5)
• CVE-2023-41039 — Sandbox escape via various forms of "format" in RestrictedPython (CVSS 7.7)
• CVE-2023-37271 — RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape (CVSS 9.9)