ZO
Vendor
zopefoundation
13
CVEs
0
On KEV
0
New 30D
Products
RE9.9
RestrictedPython
zopefoundation
6 CVEs0 on KEV0 new
AC8.7
AccessControl
zopefoundation
3 CVEs0 on KEV0 new
ZO5.4
Zope
zopefoundation
2 CVEs0 on KEV0 new
PR7.5
Products.CMFCore
zopefoundation
1 CVEs0 on KEV0 new
PR9.8
Products.SQLAlchemyDA
zopefoundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77401 | AC AccessControl zopefoundation | 6.8 | Sep 16 | Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions |
| CVE-2026-76825 | RE RestrictedPython zopefoundation | 8.4 | Sep 16 | RestrictedPython: Sandbox escape via string.Formatter field resolution |
| CVE-2026-55830 | RE RestrictedPython zopefoundation | 8.3 | Jul 8 | RestrictedPython guard hooks can be shadowed via positional-only arguments |
| CVE-2025-22153 | RE RestrictedPython zopefoundation | 7.9 | Jan 23 | try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter |
| CVE-2024-51734 | AC AccessControl zopefoundation | 8.7 | Nov 4 | User data deletion by anoynmous users in Zope |
| CVE-2024-47532 | RE RestrictedPython zopefoundation | 6.5 | Sep 30 | RestrictedPython information leakage via `AttributeError.obj` and the `string` module |
| CVE-2024-24811 | PR Products.SQLAlchemyDA zopefoundation | 9.8 | Feb 7 | Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution |
| CVE-2023-44389 | ZO Zope zopefoundation | 4.8 | Oct 4 | Zope management interface vulnerable to stored cross site scripting via the title property |
| CVE-2023-42458 | ZO Zope zopefoundation | 5.4 | Sep 21 | Zope vulnerable to Stored Cross Site Scripting with SVG images |
| CVE-2023-41050 | AC AccessControl zopefoundation | 7.7 | Sep 6 | Information disclosure through Python's "format" functionality in Zope AccessControl |
| CVE-2023-41039 | RE RestrictedPython zopefoundation | 7.7 | Aug 30 | Sandbox escape via various forms of "format" in RestrictedPython |
| CVE-2023-37271 | RE RestrictedPython zopefoundation | 9.9 | Jul 11 | RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape |
| CVE-2023-36814 | PR Products.CMFCore zopefoundation | 7.5 | Jul 3 | zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash via unchecked use of input with Python's marshal module |