Количество 3
Количество 3
CVE-2026-74883
openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.
GHSA-p2g6-jjwg-33v4
openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls.
BDU:2026-11900
Уязвимость файла openssl_encrypt/modules/plugin_system/plugin_sandbox.py библиотеки openssl_encrypt языка программирования Python, позволяющая нарушителю получить несанкционированный доступ на чтение и запись произвольных файлов
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-74883 openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад | |
GHSA-p2g6-jjwg-33v4 openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access methods like pathlib.Path and io.open. Attackers can import pathlib or io modules to read and write arbitrary files, completely bypassing the restricted_open file access controls. | CVSS3: 8.8 | 0% Низкий | около 1 месяца назад | |
BDU:2026-11900 Уязвимость файла openssl_encrypt/modules/plugin_system/plugin_sandbox.py библиотеки openssl_encrypt языка программирования Python, позволяющая нарушителю получить несанкционированный доступ на чтение и запись произвольных файлов | CVSS3: 8.8 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу