Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/zope@2.5.0
purl pkg:pypi/zope@2.5.0
Next non-vulnerable version 2.5.1b2
Latest non-vulnerable version 5.8.6
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-11xm-2sug-5qes
Aliases:
CVE-2002-0687
GHSA-vwrc-g9q6-f675
Zope Server vulnerable to DoS via header injection The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
2.5.1b2
Affected by 0 other vulnerabilities.
VCID-68cx-x4us-ryfa
Aliases:
CVE-2002-0170
GHSA-c3rp-4cjh-cp38
Zope does not properly verify the access for objects with proxy roles Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
2.5.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:42:12.111388+00:00 GitLab Importer Affected by VCID-68cx-x4us-ryfa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/zope/CVE-2002-0170.yml 38.6.0
2026-06-02T04:42:11.255364+00:00 GitLab Importer Affected by VCID-11xm-2sug-5qes https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/zope/CVE-2002-0687.yml 38.6.0