CVE-2021-20095

CVE-2021-20095

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.

GHSA-mqp6-6q54-7cxv

Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk and execute arbitrary code.

RLSA-2021:4201

Moderate: babel security and bug fix update

ELSA-2021-4201

ELSA-2021-4201: babel security and bug fix update (MODERATE)

RLSA-2021:4151

Moderate: python27:2.7 security update