Skip to content
OpenAdvisories

Package · PyPI

nbgitpuller

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.6
    CVE-2021-39160

    Code injection in nbgitpuller

    nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2…

    jupyterhub nbgitpuller nbgitpuller PyPI