# accesscontrol (PyPI) vulnerabilities

5 known vulnerabilities (2 high, 3 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://pypi.org/project/accesscontrol/

## Advisories (5)

### [CVE-2026-77401](https://cve.now/CVE-2026-77401): Zope AccessControl: Information disclosure through Python string \`format\` and \`format\_map\` functions

- Severity: Medium 6.8
- Published: Sep 16, 2026
- Affected: fixed in 7.4.

### [CVE-2024-51734](https://cve.now/CVE-2024-51734): User data deletion by anoynmous users in Zope

- Severity: High 8.7
- Published: Nov 4, 2024
- Affected: fixed in 7.2.

### [CVE-2023-41050](https://cve.now/CVE-2023-41050): Information disclosure through Python's "format" functionality in Zope AccessControl

- Severity: Medium 6.8
- Published: Sep 6, 2023
- Affected: fixed in 4.4; from 5.0, fixed in 5.8; from 6.0, fixed in 6.2; fixed in 4.4; from 5.0, fixed in 5.8; from 6.0, fixed in 6.2.

### [CVE-2021-32811](https://cve.now/CVE-2021-32811): Remote Code Execution via Script (Python) objects under Python 3

- Severity: High 7.5
- Published: Aug 2, 2021
- Affected: from 4.0, fixed in 4.3; from 5.0, fixed in 5.2.

### [CVE-2021-32807](https://cve.now/CVE-2021-32807): Remote Code Execution via unsafe classes in otherwise permitted modules

- Severity: Medium 4.4
- Published: Jul 30, 2021
- Affected: from 4.0, fixed in 4.3; from 5.0, fixed in 5.2; from 4.0, fixed in 4.3; from 5.0, fixed in 5.2.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/pypi/accesscontrol
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.