ipython vulnerabilities

Latest ipython CVEs

Newest publication first

1. CVE-2023-24816 set_term_title command injection in ipython

   Published 2023-02-10

   Medium·CVSS 4.5 EPSS 1.3%

   IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This v...

2. CVE-2015-4706 Improper Neutralization of Input During Web Page Generation in IPython

   Published 2017-09-21

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.

3. CVE-2015-4707 Improper Neutralization of Input During Web Page Generation in IPython

   Published 2017-09-20

   Medium·CVSS 6.1

   Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

4. CVE-2015-5607 IPython vulnerable to cross site request forgery (CSRF)

   Published 2017-09-20

   High·CVSS 8.8

   Cross-site request forgery in the REST API in IPython 2 and 3.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.