Skip to content
OpenAdvisories
High USN-4855-1 1 CVE

ipython vulnerability

Published Mar 15, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that IPython did not properly sanitize certain input. If
a user were tricked into opening a specially crafted notebook file, a
remote attacker could possibly use this issue to execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS ipython 2.4.1-1ubuntu0.1~esm2

Vulnerabilities 1

  • High 7.8
    CVE-2018-8768

    Jupyter Notebook file bypasses sanitization, executes JavaScript

    In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

    notebook jupyter-notebook ipython ipython Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-8768