7.9
Élevée
CVE-2026-34444 Lupa integrates the runtimes of Lua or LuaJIT2 into CPython
Description
Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended restrictions and eventually achieve arbitrary code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| lupa 2.6 | premières → 2.6 | Pas de correctif indiqué |
| Red Hat Satellite 6.18 1780492008 | premières → < 1780492008 | 1780492008 |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification