https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 04:46:33 +0000 https://cve.radiocsirt.org/vuln/cve-2021-39160 <p><strong>Affected:</strong> jupyterhub nbgitpuller</p> <p>nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade. No work around exist for users who can not upgrade.</p> <p><strong>Affected:</strong> jupyterhub nbgitpuller</p> <p>nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade. No work around exist for users who can not upgrade.</p> https://cve.radiocsirt.org/vuln/cve-2021-39160 https://cve.radiocsirt.org/vuln/ghsa-mq5p-2mcr-m52j <p><strong>Affected:</strong> PyPI: nbgitpuller</p> <p>### Impact</p> <p>Due to an unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment.</p> <p>### Patches</p> <p>0.10.2</p> <p>### Workarounds</p> <p>None, other than upgrade to 0.10.2 or downgrade to 0.8.x.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory:</p> <p>* Open an issue in [nbgitpuller](https://github.com/jupyterhub/nbgitpuller/issues) * Email our security team at [security@ipython.org](mailto:security@ipython.org)</p> <p><strong>Affected:</strong> PyPI: nbgitpuller</p> <p>### Impact</p> <p>Due to an unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment.</p> <p>### Patches</p> <p>0.10.2</p> <p>### Workarounds</p> <p>None, other than upgrade to 0.10.2 or downgrade to 0.8.x.</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory:</p> <p>* Open an issue in [nbgitpuller](https://github.com/jupyterhub/nbgitpuller/issues) * Email our security team at [security@ipython.org](mailto:security@ipython.org)</p> https://cve.radiocsirt.org/vuln/ghsa-mq5p-2mcr-m52j