How many CVEs does zopefoundation RestrictedPython have?

zopefoundation RestrictedPython has 5 published CVE records since 2023.

How many zopefoundation RestrictedPython CVEs are in CISA KEV?

None of zopefoundation RestrictedPython's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for zopefoundation RestrictedPython vulnerabilities?

Yes — 1 of zopefoundation RestrictedPython's CVEs have a known public exploit.

Which versions of zopefoundation RestrictedPython are affected?

58 distinct zopefoundation RestrictedPython versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in zopefoundation RestrictedPython CVEs?

zopefoundation RestrictedPython's CVEs most often map to these CWE weakness types: CWE-184 (Incomplete List of Disallowed Inputs), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')), CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion')).

How many critical zopefoundation RestrictedPython vulnerabilities are there?

zopefoundation RestrictedPython has 1 critical and 4 high-severity CVEs.

What is the average severity of zopefoundation RestrictedPython CVEs?

The average CVSS base score across zopefoundation RestrictedPython's scored CVEs is 8.6.

zopefoundation RestrictedPython Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every zopefoundation RestrictedPython version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.05 CVEs
4.04 CVEs
4.0a14 CVEs
4.0a24 CVEs
4.0a34 CVEs
4.0b14 CVEs
4.0b24 CVEs
4.0b34 CVEs
4.0b44 CVEs
4.0b54 CVEs
4.0b64 CVEs
4.0b74 CVEs
4.0b84 CVEs
5.04 CVEs
5.14 CVEs
5.24 CVEs
5.2a1.dev04 CVEs
6.0a1.dev03 CVEs
7.03 CVEs
7.0a1.dev03 CVEs
7.0a1.dev13 CVEs
7.0a2.dev03 CVEs
7.13 CVEs
7.23 CVEs
7.2a1.dev03 CVEs
5.3a1.dev02 CVEs
7.32 CVEs
7.42 CVEs
< 5.31 CVE
< 5.41 CVE
>= 6.0, < 6.11 CVE
>= 6.0a1.dev0, < 6.11 CVE
5.31 CVE
8.01 CVE
8.11 CVE
8.1a1.dev01 CVE
8.21 CVE
8.3a1.dev01 CVE

Version ranges

< 5.31 CVE
< 5.41 CVE
< 7.31 CVE
< 8.31 CVE
>= 6.0, < 8.01 CVE
6.0 <= v < 6.21 CVE
6.0 <= v < 8.01 CVE
6.0a1.dev0 <= v < 6.11 CVE

Fixed in

311f2f7eee4988f25f402fbc927360f5f7f5771f2 CVEs
3737596ec9f28c34a073cc845bd2f4c0a80cb6711 CVE
5.31 CVE
5.41 CVE
6.11 CVE
6.21 CVE
67d6d95794f5196295ad1f9af8811f938fc9fdc21 CVE
7.31 CVE
7031e2d8d83ec5cdbe2b38c78beab0cdab565ee81 CVE
8.01 CVE
dc6c38f4da03c25683d90ab239a16dbae9d47b701 CVE
f9ef13be3f38cb55fb6f714c608075e3c895032e1 CVE

Find a version

5 CVEs

Sort

RestrictedPython guard hooks can be shadowed via positional-only arguments
CVE-2026-55830
Public exploit
Patch
CWE-184
High · CVSS 8.3
EPSS 0.2% (14th pct)2026-07-08
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
CVE-2025-22153
Patch
CWE-843
High · CVSS 7.9
EPSS 0.4% (32th pct)2025-01-23
High vulnerability · 2024-09-30
CVE-2024-47532
Patch
CWE-200
High · CVSS 8.7
EPSS 0.7% (50th pct)2024-09-30
High vulnerability · 2023-08-30
CVE-2023-41039
Patch
CWE-74
High · CVSS 8.3
EPSS 0.6% (47th pct)2023-08-30
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
CVE-2023-37271
Patch
CWE-913
Critical · CVSS 9.9
EPSS 0.8% (54th pct)2023-07-11

zopefoundation RestrictedPython Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other zopefoundation products

Frequently asked questions

References

Track zopefoundation RestrictedPython vulnerabilities