High DLA-2790-1 1 CVE

python-babel - security update

Published Oct 21, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	python-babel	2.3.4+dfsg.1-2+deb9u1

Vulnerabilities 1

High 7.8

CVE-2021-42771

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

babel babel py3-babel python-babel Debian Azure Linux Alpine PyPI

Oct 20, 2021