VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 26, 2022· Updated Jun 17, 2026

CVE-2022-39286

CVE-2022-39286

Description

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in jupyter_core that stems from jupyter_core executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
jupyter-corePyPI
< 4.11.24.11.2

Affected products

7
  • Jupyter/jupyter_core2 versions
    cpe:2.3:a:jupyter:jupyter_core:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jupyter:jupyter_core:*:*:*:*:*:*:*:*range: <4.11.2
    • (no CPE)range: < 4.11.2
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:pypi/jupyter-core
    Range: < 4.11.2

Patches

Vulnerability mechanics

References

12

News mentions

0

No linked articles in our index yet.