Log in Start free

zopefoundation

Products

ProductCVEsExploitedLatest
RestrictedPython6–Sep 16, 2026
Zope5–Oct 4, 2023
AccessControl4–Sep 16, 2026
Products.PluggableAuthService2–Mar 8, 2021
Products.SQLAlchemyDA1–Feb 7, 2024
Products.GenericSetup1–Mar 9, 2021
Products.CMFCore1–Jul 3, 2023

Exploited and recent CVEs

  • CVE-2026-77401 Medium 6.8 Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions 0.5%
  • CVE-2026-76825 High 8.4 RestrictedPython: Sandbox escape via string.Formatter field resolution 0.6%
  • CVE-2026-55830 High 8.3 RestrictedPython guard hooks can be shadowed via positional-only arguments 0.3%
  • CVE-2025-22153 High 7.9 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter 0.4%
  • CVE-2024-51734 High 8.7 User data deletion by anoynmous users in Zope 0.4%
  • CVE-2024-47532 High 8.7 RestrictedPython information leakage via `AttributeError.obj` and the `string` module 0.7%
  • CVE-2024-24811 Critical 9.8 Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution 0.9%
  • CVE-2023-44389 Low 3.1 Zope management interface vulnerable to stored cross site scripting via the title property 0.5%
  • CVE-2023-42458 Low 3.7 Zope vulnerable to Stored Cross Site Scripting with SVG images 0.7%
  • CVE-2023-41050 Medium 6.8 Information disclosure through Python's "format" functionality in Zope AccessControl 0.6%
  • CVE-2023-41039 High 8.3 Sandbox escape via various forms of "format" in RestrictedPython 0.7%
  • CVE-2023-37271 High 8.4 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape 0.8%
  • CVE-2023-36814 High 7.5 zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module 0.7%
  • CVE-2021-32811 High 7.5 Remote Code Execution via Script (Python) objects under Python 3 2.3%
  • CVE-2021-32807 Medium 4.4 Remote Code Execution via unsafe classes in otherwise permitted modules 2.1%
  • CVE-2021-32674 High 8.8 Remote Code Execution via traversal in TAL expressions 1.6%
  • CVE-2021-32633 Medium 6.8 Remote Code Execution via traversal in TAL expressions 1.9%
  • CVE-2021-21360 Medium 5.3 Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup 1.5%
  • CVE-2021-21337 Medium 5.7 URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService 8.4%
  • CVE-2021-21336 Medium 6.5 Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager 1.5%