Vulnerabilities for ipython

First version without a known vulnerability: 8.10.0

Details

• GHSA-29gw-9793-fvw72023-02-10

  IPython vulnerable to command injection via set_term_title

  Fixed in: 8.10.0, 385d69325319a5972ee9b5983638e3617f21cb1f

• GHSA-92mr-v722-f48m2022-05-17

  Improper Input Validation in Jupyter Notebook

  Fixed in: 4.0.5, 3.2.2, 0a8096adf165e2465550bd5893d7e352544e5967

• GHSA-q326-jhw3-699g2022-05-17

  Improper Neutralization of Input During Web Page Generation in IPython

  Fixed in: 3.2.0, c2078a53543ed502efd968649fee1125e0eb549c, 7222bd53ad089a65fd610fab4626f9d0ab47dfce

• GHSA-7fc2-rm35-2pp72022-05-17

  IPython vulnerable to cross site request forgery (CSRF)

  Fixed in: 2.4.1, 3.2.3, a05fe052a18810e92d9be8c1185952c13fe4e5b0, 1415a9710407e7c14900531813c15ba6165f0816, 3.2.1

• GHSA-75cw-5cgv-g8532022-05-14

  IPython Notebook vulnerable to improper validation of the origin of websocket requests

  Fixed in: 1.2.0

• GHSA-4vwq-x64q-j4cj2022-05-14

  Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

  Fixed in: 4.0.5, 3.2.2, 3ab41641cf6fce3860c73d5cf4645aa12e1e5892

• GHSA-66gw-5xpf-gfp52022-05-13

  Improper Neutralization of Input During Web Page Generation in IPython

  Fixed in: 3.2.0, c2078a53543ed502efd968649fee1125e0eb549c, 7222bd53ad089a65fd610fab4626f9d0ab47dfce

• GHSA-pq7m-3gw7-gq5x2022-01-21

  Execution with Unnecessary Privileges in ipython

  Fixed in: 5.11, 7.16.3, 7.31.1, 8.0.1, 46a51ed69cdf41b4333943d9ceeb945c4ede5668, 6.0.0rc1