pynews (0.1.0) potentially affected by CVE-2022-21699 via ipython (4.1.1)

ipython PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - pynews 0.1.0 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

pug-nlp (>=0.1.6, <=0.1.14), twip (0.0.6) potentially affected by CVE-2022-21699 via ipython (4.2.0)

ipython PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - pug-nlp =0.1.6, =0.1.14 - twip 0.0.6 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

hydrachain (>=0.0.7, <=0.3.2), pyethapp (>=1.3.1, <=1.5.0) +3 more potentially affected by CVE-2022-21699 via ipython (4.2.1)

ipython PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - hydrachain =0.0.7, =1.3.1, =0.10.0, =0.1.0, =0.10.0 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

raiden (>=0.4.0, <=0.8.0) potentially affected by CVE-2022-21699 via ipython (5.0.0rc1)

ipython PYPI version 5.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - raiden =0.4.0, =0.8.0 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

sklearn-plus (0.0.5) potentially affected by CVE-2022-21699 via ipython (5.0.0)

ipython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - sklearn-plus 0.0.5 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

dvc (>=0.8.2, <=0.8.6), gutenberg2zim (>=1.1.3.0, <=1.1.9) +5 more potentially affected by CVE-2022-21699 via ipython (5.3.0)

ipython PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - dvc =0.8.2, =1.1.3.0, =1.0.0b1, =0.0.5, =0.0.2, =0.1.3, =2.7.73, =2.7.89 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

im-fragalysis (1.1.0), masterqa (>=1.1.0, <=1.1.3) +1 more potentially affected by CVE-2022-21699 via ipython (5.4.1)

ipython PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - im-fragalysis 1.1.0 - masterqa =1.1.0, =1.4.0, =1.6.0 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

autolab-perception (0.0.8), okwugbe (>=0.1.3, <=0.1.8) +3 more potentially affected by CVE-2022-21699 via ipython (5.5.0)

ipython PYPI version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - autolab-perception 0.0.8 - okwugbe =0.1.3, =1.7.0, =1.9.0 - stockie 0.0.28 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

seleniumbase (>=1.10.0, <=1.15.11) potentially affected by CVE-2022-21699 via ipython (5.6.0)

ipython PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - seleniumbase =1.10.0, =1.15.11 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

pylane (>=0.0.4, <=0.0.9) potentially affected by CVE-2022-21699 via ipython (5.7.0)

ipython PYPI version 5.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - pylane =0.0.4, =0.0.9 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

alerce (0.2.4), champ (>=2.0.3, <=2.1.0) +3 more potentially affected by CVE-2022-21699 via ipython (5.8.0)

ipython PYPI version 5.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - alerce 0.2.4 - champ =2.0.3, =0.1.1.dev44, =0.0.19, =0.3.3, =0.5.2 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

aiida-core (1.0.0), biocommons-seqrepo (>=0.3.5, <=0.4.5) +6 more potentially affected by CVE-2022-21699 via ipython (5.10.0)

ipython PYPI version 5.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - aiida-core 1.0.0 - biocommons-seqrepo =0.3.5, =0.2.0, =2.0.0, =1.0.0b1, =1.0.0.post2, =0.1.0, =1.3.0, =2.1.0 Source cves: CVE-2022-21699 Source...

abracadabra (>=0.0.0, <=0.0.5), ai-economist (>=1.0.0, <=1.1.1) +128 more potentially affected by CVE-2022-21699 via ipython (>=6.0.0, <=7.16.1)

ipython PYPI version =6.0.0, =0.0.0, =1.0.0, =0.0.1b1, =0.1.2, =0.0.4, =1.0.2, =1.0.0, =0.0.4, =0.2.5, =1.0.0rc1, =20210206.0.0, =2.2.2b1, =0.1.0, =0.3.4, =0.3.8 and more Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

abracadabra (>=0.0.6, <=0.0.7), ai-economist (>=1.2.3, <=1.7.0) +115 more potentially affected by CVE-2022-21699 via ipython (>=7.17.0, <=7.31.0)

ipython PYPI version =7.17.0, =0.0.6, =1.2.3, =0.1.0, =0.1.2, =0.0.27, =0.1.3, =1.0.1, =0.12.1, =0.11.0, =0.0.5, =0.0.14 - cheope 0.3.0 and more Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

ezdsp (>=1.3.0, <=1.3.2), mngs (1.2.3) +1 more potentially affected by CVE-2022-21699 via ipython (8.0.0)

ipython PYPI version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - ezdsp =1.3.0, =0.1.23, =0.2.2 Source cves: CVE-2022-21699 Source advisory: OSV:PYSEC-2022-12...

Remote code execution

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699 Execution with Unnecessary Privileges in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699 Execution with Unnecessary Privileges in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699 Execution with Unnecessary Privileges in ipython

IPython Interactive Python is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary...

CVE-2022-21699

CVE-2022-21699 affects IPython and allows cross-user code execution by IPython potentially executing config files from the current working directory. The vulnerability arises from not properly managing cross-user temporary files, enabling one user to run code as another on the same machine. Publi...