corradin-opioid-project (0.1.0), e2eml (>=0.9.4, <=0.9.9) +6 more potentially affected by CVE-2025-30167 via jupyter-core (4.7.0)

jupyter-core PYPI version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - corradin-opioid-project 0.1.0 - e2eml =0.9.4, =0.0.0, =0.0.2, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2025-30167 Source advisory:...

sphynxml (2.0.0), zrp (>=0.1.8, <=0.1.9) potentially affected by CVE-2025-30167 via jupyter-core (4.9.1)

jupyter-core PYPI version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - sphynxml 2.0.0 - zrp =0.1.8, =0.1.9 Source cves: CVE-2025-30167 Source advisory: OSV:PYSEC-2026-1477...

eflow (0.1.3), mltronsautodataprep (>=0.0.12, <=0.0.13) +1 more potentially affected by CVE-2025-30167 via jupyter-core (4.5.0)

jupyter-core PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - eflow 0.1.3 - mltronsautodataprep =0.0.12, =0.0.7, =0.0.11 Source cves: CVE-2025-30167 Source advisory: OSV:PYSEC-2026-1477...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2025-30167 via jupyter-core (4.3.0)

jupyter-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2025-30167 Source advisory: OSV:PYSEC-2026-1477...

CVE-2025-30167 vulnerabilities

Vulnerabilities for packages: jupyter-docker-stacks, kubeflow-pipelines-visualization-server...

CVE-2025-30167 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, jupyter-docker-stacks, tensorflow-gpu-jupyter...

CVE-2025-30167

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...

eflow (0.1.3), mltronsautodataprep (>=0.0.12, <=0.0.13) +1 more potentially affected by CVE-2025-30167 via jupyter-core (4.5.0)

jupyter-core PYPI version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - eflow 0.1.3 - mltronsautodataprep =0.0.12, =0.0.7, =0.0.11 Source cves: CVE-2025-30167 Source advisory: OSV:GHSA-33P9-3P43-82VQ...

abracadabra (>=0.0.6, <=0.0.7), ai-economist (>=1.2.3, <=1.7.1) +20 more potentially affected by CVE-2025-30167 via jupyter-core (4.7.1)

jupyter-core PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - abracadabra =0.0.6, =1.2.3, =1.0.1, =0.0.86, =3.0.0a1, =1.0.1, =1.8.0, =1.0.1, =0.1.1.1, =0.0.2, =0.0.6 - neurocat 0.0.1 - omdenalore...

ac-solver (0.1.0), airosentris (>=0.1.23, <=0.1.31) +181 more potentially affected by CVE-2025-30167 via jupyter-core (>=5.0.0, <=5.7.2)

jupyter-core PYPI version =5.0.0, =0.1.23, =0.20.0, =0.9.5, =0.1.0, =0.1.0, =1.0.1, =1.0.1, =0.3.1, =0.1.1, =0.1.0, =0.3.0, =0.0.1, =0.0.8.post4 and more Source cves: CVE-2025-30167 Source advisory: GHSA-33P9-3P43-82VQ...

hugo-jupyter (>=0.2.1, <=0.3.0) potentially affected by CVE-2025-30167 via jupyter-core (4.3.0)

jupyter-core PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-core and may be impacted: - hugo-jupyter =0.2.1, =0.3.0 Source cves: CVE-2025-30167 Source advisory: OSV:GHSA-33P9-3P43-82VQ...

CVE-2025-30167

creationtimestamp| type| source ---|---|--- 2025-06-03 17:11:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114620542750640650 2025-06-03 17:33:03+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqpt3nqzydj2 2025-06-03...

CVE-2025-30167 Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...

CVE-2025-30167

Jupyter Core on Windows (CVE-2025-30167) before 5.8.0 searches the shared %PROGRAMDATA% for configuration files (SYSTEM_CONFIG_PATH and SYSTEM_JUPYTER_PATH), which may let an attacker place files affecting other users. Affected: Jupyter Core components on Windows in multi-user, unprotected %PROGR...

CVE-2025-30167

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared %PROGRAMDATA% directory is searched for configuration files SYSTEMCONFIGPATH and SYSTEMJUPYTERPATH, which may allow users to create configuration...