{"action":"Upgrade ipython to 1.2.0 or later.","affected":[{"fixed":"1.2.0","introduced":"0.12"}],"component":"ipython","cve_ids":["CVE-2014-3429"],"ecosystem":"PyPI","epss":0.04703,"exploited":false,"fixed_versions":["1.2.0"],"ghsa_id":"GHSA-75cw-5cgv-g853","id":"tcs_01M5KF4ZE78SNWF6ZEYNCNQPSJ","modified_at":"2024-09-23T17:08:29.475348Z","published_at":"2022-05-14T02:05:20Z","references":["https://osv.dev/vulnerability/GHSA-75cw-5cgv-g853","https://nvd.nist.gov/vuln/detail/CVE-2014-3429","https://github.com/ipython/ipython/pull/4845","https://github.com/ipython/ipython/commit/e5b669ce4750d628dba383fd637dbde918ea15f5","https://github.com/mattvonrocketstein/ipython/commit/dd4135db9f42d196a46553310a8e63ff5658671d","https://bugzilla.redhat.com/show_bug.cgi?id=1119890","https://exchange.xforce.ibmcloud.com/vulnerabilities/94497","https://github.com/ipython/ipython","https://github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2014-21.yaml","http://advisories.mageia.org/MGASA-2014-0320.html","http://lambdaops.com/cross-origin-websocket-hijacking-of-ipython","http://lists.opensuse.org/opensuse-updates/2014-08/msg00039.html","http://permalink.gmane.org/gmane.comp.python.ipython.devel/13198","http://seclists.org/oss-sec/2014/q3/152"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-75cw-5cgv-g853","url":"https://osv.dev/vulnerability/GHSA-75cw-5cgv-g853"}],"summary":"IPython Notebook vulnerable to improper validation of the origin of websocket requests"}