https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T10:04:47.418705+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04040 bdu:2023-04040 2026-10-12T10:04:47.423786+00:00 bdu:2023-04040 https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2022-39286 BREW-jupyterlab-CVE-2022-39286 — Execution with Unnecessary Privileges in JupyterApp 2026-10-12T10:04:47.423844+00:00

Affected: Homebrew: jupyterlab

### Impact _What kind of vulnerability is it? Who is impacted?_ We’d like to disclose an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in the current working directory. This vulnerability allows one user to run code as another.

### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to `jupyter_core>=4.11.2`.

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ No

### References _Are there any links users can visit to find out more?_ Similar advisory in [IPython](https://github.com/advisories/GHSA-pq7m-3gw7-gq5x)

 https://cve.radiocsirt.org/vuln/euvd-2026-233464 EUVD-2026-233464 2026-10-12T10:04:47.423898+00:00 EUVD-2026-233464 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39286 fkie_cve-2022-39286 2026-10-12T10:04:47.423912+00:00

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-m678-f26j-3hrp GHSA-m678-f26j-3hrp — Execution with Unnecessary Privileges in JupyterApp 2026-10-12T10:04:47.423933+00:00

Affected: PyPI: jupyter-core

### Impact _What kind of vulnerability is it? Who is impacted?_ We’d like to disclose an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in the current working directory. This vulnerability allows one user to run code as another.

### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to `jupyter_core>=4.11.2`.

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ No

### References _Are there any links users can visit to find out more?_ Similar advisory in [IPython](https://github.com/advisories/GHSA-pq7m-3gw7-gq5x)

 https://cve.radiocsirt.org/vuln/gsd-2022-39286 gsd-2022-39286 2026-10-12T10:04:47.423960+00:00 gsd-2022-39286 https://cve.radiocsirt.org/vuln/pysec-2022-42974 PYSEC-2022-42974 2026-10-12T10:04:47.423971+00:00

Affected: PyPI: jupyter-core

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-39286 UBUNTU-CVE-2022-39286 2026-10-12T10:04:47.423989+00:00

Affected: Ubuntu:Pro:18.04:LTS: jupyter-core, Ubuntu:Pro:20.04:LTS: jupyter-core, Ubuntu:Pro:22.04:LTS: jupyter-core

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.