What is GHSA-gcm4-q2pg-xw89?

GHSA-gcm4-q2pg-xw89 is a security advisory published by GitHub Security Advisories with Critical severity. ipycache is vulnerable to Code Injection

Which CVE IDs does GHSA-gcm4-q2pg-xw89 cover?

GHSA-gcm4-q2pg-xw89 covers the following CVE IDs: CVE-2019-7539. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gcm4-q2pg-xw89?

GHSA-gcm4-q2pg-xw89 has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

Which products are affected by GHSA-gcm4-q2pg-xw89?

GHSA-gcm4-q2pg-xw89 affects 1 product, including: pip/ipycache:\u003c= 0.1.4.

GHSA-gcm4-q2pg-xw89CriticalCVSS 9.6

ipycache is vulnerable to Code Injection

Vendor

GitHub Security Advisories

Published

March 25, 2019

Last Modified

September 23, 2024

🔗 CVE IDs covered (1)

CVE-2019-7539 →

📋 Description

A code injection issue was discovered in ipycache versions up to 0.1.4.

🎯 Affected products1

pip/ipycache:<= 0.1.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-7539
https://github.com/rossant/ipycache/issues/47
https://github.com/advisories/GHSA-gcm4-q2pg-xw89
https://github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e
https://github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753
https://github.com/pypa/advisory-database/tree/main/vulns/ipycache/PYSEC-2019-180.yaml