Most recent entries from all

CVE-2022-39286 — Execution with Unnecessary Privileges in JupyterApp

2026-10-04T11:49:03.472373+00:00

Affected: jupyter_core

Jupyter Core is a package for the core common functionality of Jupyter projects. Jupyter Core prior to version 4.11.2 contains an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in CWD. This vulnerability allows one user to run code as another. Version 4.11.2 contains a patch for this issue. There are no known workarounds.

GHSA-m678-f26j-3hrp — Execution with Unnecessary Privileges in JupyterApp

2026-10-04T11:49:03.472479+00:00

Affected: PyPI: jupyter-core

### Impact _What kind of vulnerability is it? Who is impacted?_ We’d like to disclose an arbitrary code execution vulnerability in `jupyter_core` that stems from `jupyter_core` executing untrusted files in the current working directory. This vulnerability allows one user to run code as another.

### Patches _Has the problem been patched? What versions should users upgrade to?_ Users should upgrade to `jupyter_core>=4.11.2`.

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ No

### References _Are there any links users can visit to find out more?_ Similar advisory in [IPython](https://github.com/advisories/GHSA-pq7m-3gw7-gq5x)

PYSEC-2022-42974

2026-10-04T11:49:03.472541+00:00

Affected: PyPI: jupyter-core