Description
ZServer in Zope 2.10.x before 2.10.12 and 2.11.x before 2.11.7 allows remote attackers to cause a denial of service (crash of worker threads) via vectors that trigger uncaught exceptions.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | zope | >= 2.10.0, < 2.10.12 | 2.10.12 | GHSA-qh4q-fwf8-qqrw |
| PyPI | zope | >= 2.11.0, < 2.11.7 | 2.11.7 | GHSA-qh4q-fwf8-qqrw |
| PyPI | zope | >= 2.10.0, < 2.10.12 · >= 2.11.0, < 2.11.7 | 2.10.12, 2.11.7 | PYSEC-2010-32 |