{"action":"Upgrade nbgitpuller to 0.10.2 or later.","affected":[{"fixed":"0.10.2","introduced":"0.9.0"}],"component":"nbgitpuller","cve_ids":["CVE-2021-39160"],"ecosystem":"PyPI","epss":0.0173,"exploited":false,"fixed_versions":["0.10.2"],"ghsa_id":"GHSA-mq5p-2mcr-m52j","id":"tcs_01M5KFRG145NSV4FEGM82ED9JK","modified_at":"2026-07-08T06:28:22.586401887Z","published_at":"2021-08-30T16:17:06Z","references":["https://osv.dev/vulnerability/GHSA-mq5p-2mcr-m52j","https://github.com/jupyterhub/nbgitpuller/security/advisories/GHSA-mq5p-2mcr-m52j","https://nvd.nist.gov/vuln/detail/CVE-2021-39160","https://github.com/jupyterhub/nbgitpuller/commit/07690644f29a566011dd0d7ba14cae3eb0490481","https://github.com/jupyterhub/nbgitpuller","https://github.com/jupyterhub/nbgitpuller/blob/main/CHANGELOG.md#0102---2021-08-25","https://github.com/pypa/advisory-database/tree/main/vulns/nbgitpuller/PYSEC-2021-315.yaml"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-mq5p-2mcr-m52j","url":"https://osv.dev/vulnerability/GHSA-mq5p-2mcr-m52j"}],"summary":"Code injection in nbgitpuller"}