Skip to content
OpenAdvisories

Package · PyPI

ipython

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 4.5
    CVE-2023-24816

    set_term_title command injection in ipython

    IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific …

    ipython ipython ipython ipython Ubuntu PyPI
  • High 8.2
    CVE-2022-21699

    Execution with Unnecessary Privileges in ipython

    IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not p…

    ipython ipython ipython ipython Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2015-4706

    Improper Neutralization of Input During Web Page Generation in IPython

    Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.

    ipython PyPI
  • Medium 6.1
    CVE-2015-4707

    Improper Neutralization of Input During Web Page Generation in IPython

    Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

    ipython ipython Debian PyPI
  • High 8.8
    CVE-2015-5607

    IPython vulnerable to cross site request forgery (CSRF)

    Cross-site request forgery in the REST API in IPython 2 and 3.

    ipython ipython ipython Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2015-7337

    Improper Input Validation in Jupyter Notebook

    The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

    notebook ipython PyPI
  • Medium 6.1
    CVE-2015-6938

    Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

    Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was o…

    notebook ipython ipython Debian PyPI
  • Critical 9.8
    CVE-2014-3429

    IPython Notebook vulnerable to improper validation of the origin of websocket requests

    IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

    ipython ipython Debian PyPI