try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter

概要

参考情報

• zopefoundation/RestrictedPython security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-22153 · ADVISORY
• zopefoundation/RestrictedPython commit 48a92c5 · WEB
• zopefoundation/RestrictedPython · PACKAGE
• pypi.org/project/restrictedpython · PACKAGE
• GitHub Advisory GHSA-gmj9-h825-chq2 · ADVISORY

restrictedpython のその他の脆弱性

• CVE-2026-76825高 8.4RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to …
• CVE-2026-55830高 8.3RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted envir…
• CVE-2024-47532中 6.5RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentiall…
• CVE-2023-41039高 7.7RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone cont…
• CVE-2023-37271緊急 9.9RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted…