https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T06:25:44.180727+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-30473 EUVD-2026-30473 2026-10-19T06:25:44.183814+00:00 EUVD-2026-30473 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39160 fkie_cve-2021-39160 2026-10-19T06:25:44.183845+00:00

nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade. No work around exist for users who can not upgrade.

 https://cve.radiocsirt.org/vuln/ghsa-mq5p-2mcr-m52j GHSA-mq5p-2mcr-m52j — Code injection in nbgitpuller 2026-10-19T06:25:44.183875+00:00

Affected: PyPI: nbgitpuller

### Impact

Due to an unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment.

### Patches

0.10.2

### Workarounds

None, other than upgrade to 0.10.2 or downgrade to 0.8.x.

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [nbgitpuller](https://github.com/jupyterhub/nbgitpuller/issues) * Email our security team at [security@ipython.org](mailto:security@ipython.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-39160 gsd-2021-39160 2026-10-19T06:25:44.183907+00:00 gsd-2021-39160 https://cve.radiocsirt.org/vuln/pysec-2021-315 PYSEC-2021-315 2026-10-19T06:25:44.183919+00:00

Affected: PyPI: nbgitpuller

nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade. No work around exist for users who can not upgrade.