zope vulnerabilities

Recent CVEs affecting zope products. 3 tracked.

zope has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-09-30. Highest priority: CVE-2024-24811 (score 54/100).

• CVE-2024-47532 MEDIUM 6.5 UPGRADE RestrictedPython is a restricted execution environment for Python to run untrusted code
• CVE-2024-24811 CRITICAL 9.8 UPGRADE SQLAlchemyDA is a generic database adapter for ZSQL methods
• CVE-2023-44389 LOW 3.1 UPGRADE Zope is an open-source web application server

FAQ

How do I fix zope vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is zope being exploited right now?

None of the tracked zope CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which zope CVE should I patch first?

CVE-2024-24811 currently ranks highest (54/100): SQLAlchemyDA is a generic database adapter for ZSQL methods.

Products

• restrictedpython
• sqlalchemyda
• zope

RSS feed for zope · ← Back to latest CVEs