Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

accesscontrol

5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 high, 3 medium
Registry
PyPI

Advisories 5

  • CVE-2026-77401Medium 6.8

    Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions

    Affected: fixed in 7.4.

  • User data deletion by anoynmous users in Zope

    Affected: fixed in 7.2.

  • CVE-2023-41050Medium 6.8

    Information disclosure through Python's "format" functionality in Zope AccessControl

    Affected: fixed in 4.4; from 5.0, fixed in 5.8; from 6.0, fixed in 6.2; fixed in 4.4; from 5.0, fixed in 5.8; from 6.0, fixed in 6.2.

  • Remote Code Execution via Script (Python) objects under Python 3

    Affected: from 4.0, fixed in 4.3; from 5.0, fixed in 5.2.

  • CVE-2021-32807Medium 4.4

    Remote Code Execution via unsafe classes in otherwise permitted modules

    Affected: from 4.0, fixed in 4.3; from 5.0, fixed in 5.2; from 4.0, fixed in 4.3; from 5.0, fixed in 5.2.