22 matches found
EUVD-2021-0141
Malware in sbrugna...
CVE-2021-39160
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
grid2viz (>=1.1.0a0, <=1.3.1) potentially affected by CVE-2021-39160 via nbgitpuller (0.9.0)
nbgitpuller PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbgitpuller and may be impacted: - grid2viz =1.1.0a0, =1.3.1 Source cves: CVE-2021-39160 Source advisory: OSV:GHSA-MQ5P-2MCR-M52J...
GHSA-MQ5P-2MCR-M52J Code injection in nbgitpuller
Impact Due to an unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. Patches 0.10.2 Workarounds None, other than upgrade to 0.10.2 or downgrade to 0.8.x. For more information If you have any questions or comments about this...
grid2viz (>=1.1.0a0, <=1.3.1) potentially affected by CVE-2021-39160 via nbgitpuller (0.9.0)
nbgitpuller PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbgitpuller and may be impacted: - grid2viz =1.1.0a0, =1.3.1 Source cves: CVE-2021-39160 Source advisory: GHSA-MQ5P-2MCR-M52J...
Code injection in nbgitpuller
Impact Due to an unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. Patches 0.10.2 Workarounds None, other than upgrade to 0.10.2 or downgrade to 0.8.x. For more information If you have any questions or comments about this...
Remote Code Execution (RCE)
nbgitpuller is vulnerable to remote code execution. The vulnerability exists due to lack of sanitization of input in the user environment when visiting maliciously crafted links...
CVE-2021-39160
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
CVE-2021-39160
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
PYSEC-2021-315
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
PYSEC-2021-316
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
PYSEC-2021-315
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
grid2viz (>=1.1.0a0, <=1.3.1) potentially affected by CVE-2021-39160 via nbgitpuller (0.9.0)
nbgitpuller PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbgitpuller and may be impacted: - grid2viz =1.1.0a0, =1.3.1 Source cves: CVE-2021-39160 Source advisory: OSV:PYSEC-2021-315...
Input validation
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
CVE-2021-39160
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
grid2viz (>=1.1.0a0, <=1.3.1) potentially affected by CVE-2021-39160 via nbgitpuller (0.9.0)
nbgitpuller PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbgitpuller and may be impacted: - grid2viz =1.1.0a0, =1.3.1 Source cves: CVE-2021-39160 Source advisory: MEND:CVE-2021-39160...
CVE-2021-39160
nbgitpuller is a Jupyter server extension that is vulnerable to arbitrary code execution due to unsanitized input when visiting crafted links. The issue affects the component responsible for syncing a git repository to a local path and has been fixed in version 0.10.2; users are advised to upgrad...
CVE-2021-39160 Code injection in nbgitpuller
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
CVE-2021-39160: Improper Control of Generation of Code
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade...
PT-2021-22417 · Unknown · Nbgitpuller
Name of the Vulnerable Software and Affected Versions: nbgitpuller versions prior to 0.10.2 Description: The issue arises due to unsanitized input, allowing arbitrary code execution in the user environment when visiting maliciously crafted links. Recommendations: For versions prior to 0.10.2,...