Vulnerabilities for RestrictedPython

First version without a known vulnerability: 8.0

Details

• GHSA-gmj9-h825-chq22025-01-23

  try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

  Fixed in: 8.0

• GHSA-5rfv-66g4-jr8h2024-09-30

  RestrictedPython information leakage via `AttributeError.obj` and the `string` module

  Fixed in: 7.3, d701cc36cccac36b21fa200f1f2d1945a9a215e6

• GHSA-xjw2-6jm9-rf672023-08-30

  Sandbox escape via various forms of "format".

  Fixed in: 5.4, 6.2, 4134aedcff17c977da7717693ed89ce56d54c120

• GHSA-wqc8-x2pr-7jqh2023-07-10

  RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

  Fixed in: 5.3, 6.1, c8eca66ae49081f0016d2e1f094c3d72095ef531