Skip to content
OpenAdvisories
High DLA-3195-1 1 CVE

jupyter-core - security update

Published Nov 17, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 jupyter-core 4.4.0-2+deb10u1

Vulnerabilities 1

  • High 8.8
    CVE-2022-39286

    Execution with Unnecessary Privileges in JupyterApp

    Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vu…

    jupyter jupyter_core jupyter-core jupyter-core Debian Ubuntu PyPI