Related Vulnerabilities: CVE-2021-20095  

Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk and execute arbitrary code.

Severity Medium

Remote No

Type Arbitrary code execution

Description

Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk and execute arbitrary code.

AVG-1894 python-babel 2.9.0-1 Medium Vulnerable

https://www.tenable.com/security/research/tra-2021-14
https://github.com/python-babel/babel/pull/782
https://github.com/python-babel/babel/commit/412015ef642bfcc0d8ba8f4d05cdbb6aac98d9b3