PyPI package
ipython
pkg:pypi/ipython
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-24816 | — | < 8.10.0 | 8.10.0 | Feb 10, 2023 | IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This v | ||
| CVE-2022-21699 | — | < 5.11 | 5.11 | Jan 19, 2022 | IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cros | ||
| CVE-2015-4706 | Med | 6.1 | >= 3.0.0, < 3.2.0 | 3.2.0 | Sep 21, 2017 | Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path. | |
| CVE-2015-4707 | Med | 6.1 | < 3.2.0 | 3.2.0 | Sep 20, 2017 | Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path. | |
| CVE-2015-5607 | Hig | 8.8 | >= 0.12, < 2.4.1 | 2.4.1 | Sep 20, 2017 | Cross-site request forgery in the REST API in IPython 2 and 3. | |
| CVE-2015-7337 | — | < 3.2.2 | 3.2.2 | Sep 29, 2015 | The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types. | ||
| CVE-2015-6938 | — | < 3.2.2 | 3.2.2 | Sep 21, 2015 | Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported a | ||
| CVE-2014-3429 | — | >= 0.12, < 1.2.0 | 1.2.0 | Aug 7, 2014 | IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page. |
- CVE-2023-24816Feb 10, 2023affected < 8.10.0fixed 8.10.0
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This v
- CVE-2022-21699Jan 19, 2022affected < 5.11fixed 5.11
IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cros
- affected >= 3.0.0, < 3.2.0fixed 3.2.0
Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
- affected < 3.2.0fixed 3.2.0
Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
- affected >= 0.12, < 2.4.1fixed 2.4.1
Cross-site request forgery in the REST API in IPython 2 and 3.
- CVE-2015-7337Sep 29, 2015affected < 3.2.2fixed 3.2.2
The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.
- CVE-2015-6938Sep 21, 2015affected < 3.2.2fixed 3.2.2
Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported a
- CVE-2014-3429Aug 7, 2014affected >= 0.12, < 1.2.0fixed 1.2.0
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.