Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/zodb3@3.8
purl pkg:pypi/zodb3@3.8
Tags Ghost
Next non-vulnerable version 3.10.0a2
Latest non-vulnerable version 3.10.0a2
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-msp8-4g67-cue6
Aliases:
CVE-2009-2701
GHSA-m52m-2qpx-9j4j
PYSEC-2009-10
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing and blob support are enabled, allows remote authenticated users to read or delete arbitrary files via unknown vectors.
3.8.3
Affected by 1 other vulnerability.
3.9.0rc2
Affected by 1 other vulnerability.
3.9.0c2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:23:15.543359+00:00 GHSA Importer Affected by VCID-msp8-4g67-cue6 https://github.com/advisories/GHSA-m52m-2qpx-9j4j 38.6.0
2026-06-02T04:42:23.599392+00:00 GitLab Importer Affected by VCID-msp8-4g67-cue6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/ZODB3/CVE-2009-2701.yml 38.6.0