ipycache is vulnerable to Code Injection

2019-03-2516:16:55

Google

osv.dev

0.002 Low

EPSS

Percentile

58.4%

A code injection issue was discovered in ipycache versions up to 0.1.4.

CPENameOperatorVersion
ipycacheeq0.1.3
ipycacheeq0.1.4
ipycacheeq0.1.1
ipycacheeq0.1.2
ipycacheeq0.1.0

Name	Operator	Version
ipycache	eq	0.1.3
ipycache	eq	0.1.4
ipycache	eq	0.1.1
ipycache	eq	0.1.2
ipycache	eq	0.1.0

References

github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e

github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753

github.com/advisories/GHSA-gcm4-q2pg-xw89

github.com/rossant/ipycache

github.com/rossant/ipycache/issues/47

nvd.nist.gov/vuln/detail/CVE-2019-7539

0.002 Low

EPSS

Percentile

58.4%

Related for OSV:GHSA-GCM4-Q2PG-XW89