High DSA-5018-1 1 CVE

python-babel - security update

Published Dec 9, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	python-babel	2.6.0+dfsg.1-1+deb10u1

Vulnerabilities 1

High 7.8

CVE-2021-42771

Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

babel babel py3-babel python-babel Debian Azure Linux Alpine PyPI

Oct 20, 2021