zopefoundation RestrictedPython

• CVE-2026-76825 High 8.4 RestrictedPython: Sandbox escape via string.Formatter field resolution 0.6%
• CVE-2026-55830 High 8.3 RestrictedPython guard hooks can be shadowed via positional-only arguments 0.3%
• CVE-2025-22153 High 7.9 try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter 0.4%
• CVE-2024-47532 High 8.7 RestrictedPython information leakage via `AttributeError.obj` and the `string` module 0.7%
• CVE-2023-41039 High 8.3 Sandbox escape via various forms of "format" in RestrictedPython 0.7%
• CVE-2023-37271 High 8.4 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape 0.8%