Most recent entries from all

bdu:2023-04040

BREW-jupyterlab-CVE-2022-39286 — Execution with Unnecessary Privileges in JupyterApp

Affected: Homebrew: jupyterlab

### Impact _What kind of vulnerability is it? Who is impacted?_ We’d like to disclose an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in the current working directory. This vulnerability allows one user to run code as another.

### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to `jupyter_core>=4.11.2`.

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ No

### References _Are there any links users can visit to find out more?_ Similar advisory in [IPython](https://github.com/advisories/GHSA-pq7m-3gw7-gq5x)

EUVD-2026-233464

fkie_cve-2022-39286

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

GHSA-m678-f26j-3hrp — Execution with Unnecessary Privileges in JupyterApp

Affected: PyPI: jupyter-core

### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to `jupyter_core>=4.11.2`.

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ No

### References _Are there any links users can visit to find out more?_ Similar advisory in [IPython](https://github.com/advisories/GHSA-pq7m-3gw7-gq5x)

gsd-2022-39286

PYSEC-2022-42974

Affected: PyPI: jupyter-core

UBUNTU-CVE-2022-39286

Affected: Ubuntu:Pro:18.04:LTS: jupyter-core, Ubuntu:Pro:20.04:LTS: jupyter-core, Ubuntu:Pro:22.04:LTS: jupyter-core