Skip to content
OpenAdvisories
High USN-6153-1 1 CVE

jupyter-core vulnerability

Published Jun 12, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Jupyter Core executed untrusted files in the current
working directory. An attacker could possibly use this issue to execute
arbitrary code.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS jupyter-core 4.4.0-2ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS jupyter-core 4.6.3-3ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS jupyter-core 4.9.1-1ubuntu0.1~esm1

Vulnerabilities 1

  • High 8.8
    CVE-2022-39286

    Execution with Unnecessary Privileges in JupyterApp

    Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vu…

    jupyter jupyter_core jupyter-core jupyter-core Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2022-39286