https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47532.htmlhttps://patchthecve.com/cve/CVE-2024-47532.htmlWed, 17 Jun 2026 07:57:15 +0000MEDIUM 6.5: RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentially sensible) information indirectly via AttributeError.obj and the string module. The problem will be fixed in version 7.3. As a workaround, If the application dhttps://patchthecve.com/cve/CVE-2024-24811.htmlhttps://patchthecve.com/cve/CVE-2024-24811.htmlWed, 17 Jun 2026 07:14:56 +0000CRITICAL 9.8: SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. The problem has been patched in version 2.https://patchthecve.com/cve/CVE-2023-44389.htmlhttps://patchthecve.com/cve/CVE-2023-44389.htmlWed, 17 Jun 2026 06:27:32 +0000LOW 3.1: Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI). All versions of Zope 4 and Zope 5 are affected. Patches will be released withhttps://patchthecve.com/cve/CVE-2023-42458.htmlhttps://patchthecve.com/cve/CVE-2023-42458.htmlWed, 17 Jun 2026 06:23:52 +0000LOW 3.7: Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for SVG images. Note that an image tag with an SVG image as source is never vulnerable, even when the SVG image contains malicious code. To exploit the vulnerabilithttps://patchthecve.com/cve/CVE-2023-41050.htmlhttps://patchthecve.com/cve/CVE-2023-41050.htmlWed, 17 Jun 2026 06:20:18 +0000MEDIUM 6.8: AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format string to "read" objects accessible (recursively) via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Phttps://patchthecve.com/cve/CVE-2023-41039.htmlhttps://patchthecve.com/cve/CVE-2023-41039.htmlWed, 17 Jun 2026 06:20:13 +0000HIGH 8.3: RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to crit