HIGH 7.9 PyPI
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
GHSA-gmj9-h825-chq2 · CVE-2025-22153 · PYSEC-2026-1874
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Impact
Via a type confusion bug in the CPython interpreter when using try/except* RestrictedPython could be bypassed.
We believe this should be fixed upstream in Python itself until that we remove support for try/except* from RestrictedPython.
(It has been fixed for some Python versions.)
Patches
Patched in version 8.0 by removing support for try/except* clauses
Workarounds
There is no workaround.
References
none
References
- WEB https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-gmj9-h825-chq2
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-22153
- WEB https://github.com/zopefoundation/RestrictedPython/commit/48a92c5bb617a647cffd0dadd4d5cfe626bcdb2f
- PACKAGE https://github.com/zopefoundation/RestrictedPython
Ready to move
Start Securing
Free, no credit card | First findings in minutes