- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 6 · 6 high
- Weekly downloads
- 3M
- Dependents
- 874
- Registry
- PyPI
Advisories 6
- CVE-2026-76825High 8.4
RestrictedPython: Sandbox escape via string.Formatter field resolution
Affected: fixed in 8.4.
- CVE-2026-55830High 8.3
RestrictedPython guard hooks can be shadowed via positional-only arguments
Affected: fixed in 8.3.
- CVE-2025-22153High 7.9
try/except clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Affected: from 6.0, fixed in 8.0.
- CVE-2024-47532High 8.7
RestrictedPython information leakage via `AttributeError.obj` and the `string` module
Affected: fixed in 7.3.
- CVE-2023-41039High 8.3
Sandbox escape via various forms of "format" in RestrictedPython
Affected: fixed in 5.4; from 6.0, fixed in 6.2; from 6.0, fixed in 6.2; fixed in 5.4.
- CVE-2023-37271High 8.4
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Affected: fixed in 5.3; from 6.0a1.dev0, fixed in 6.1.