2 known bugs in Babel, with affected versions, fixes and workarounds. Sourced from upstream issue trackers.
| Severity | Affected | Fixed in | Title | Status | Source |
|---|---|---|---|---|---|
| high | any | 2.9.1 | Directory Traversal in Babel Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution. | fixed | osv:GHSA-h4m5-qpfp-3mpv |
| medium |
Get this data programmatically \u2014 free, no authentication.
curl https://depscope.dev/api/bugs/pypi/Babel| 2.9.1 |
PYSEC-2021-421: advisory Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution. |
| fixed |
| osv:PYSEC-2021-421 |