CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

Date published : 2021-10-20

https://github.com/python-babel/babel/pull/782

https://lists.debian.org/debian-lts/2021/10/msg00040.html