zopefoundation Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by zopefoundation

JSON RSS CSV 🔔 Create Alert Trigger

8 July 2026

Vulnerability in RestrictedPython Tool Affects Access Policy in Zope Foundation Applications
CVE-2026-55830
ZopefoundationRestrictedpython8.3HIGH

23 January 2025

Type Confusion Vulnerability in RestrictedPython Tool by Zope Foundation
CVE-2025-22153
ZopefoundationRestrictedpython7.9HIGH

4 November 2024

Zope AccessControl Security Fix: Anonymous Users Can Delete User Data
CVE-2024-51734
ZopefoundationAccesscontrol8.7HIGH

7 February 2024

Unauthenticated Execution of Arbitrary SQL Statements Vulnerability Affects SQLAlchemyDA Users
CVE-2024-24811
ZopefoundationProducts.sqlalchemyda9.8CRITICAL

30 August 2023

Sandbox escape via various forms of "format" in RestrictedPython
CVE-2023-41039
ZopefoundationRestrictedpython8.3HIGH

11 July 2023

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
CVE-2023-37271
ZopefoundationRestrictedpython8.4HIGH

3 July 2023

zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
CVE-2023-36814
ZopefoundationProducts.cmfcore7.5HIGH

2 August 2021

Remote Code Execution via Script (Python) objects under Python 3
CVE-2021-32811
ZopefoundationZope7.5HIGH

8 June 2021

Remote Code Execution via traversal in TAL expressions
CVE-2021-32674
ZopefoundationZope8.8HIGH