GHSA-gmj9-h825-chq2
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | RestrictedPython | >= 6.0, < 8.0 | 8.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Via a type confusion bug in the CPython interpreter when using `try/except*` RestrictedPython could be bypassed.
We believe this should be fixed upstream in Python itself until that we remove support for `try/except*` from RestrictedPython.
(It has been fixed for some Python versions.)
### Patches
Patched in version 8.0 by removing support for `try/except*` clauses
### Workarounds
There is no workaround.
### References
none
References
External links from the advisory. They lead to third-party sites.