{"action":"Upgrade jupyter-core to 5.8.1 or later.","affected":[{"fixed":"5.8.1","introduced":"0"}],"component":"jupyter-core","cve_ids":["CVE-2025-30167"],"ecosystem":"PyPI","epss":0.0019,"exploited":false,"fixed_versions":["5.8.1"],"ghsa_id":"GHSA-33p9-3p43-82vq","id":"tcs_01M5KGSV8ZWNDPF1F0FMBTABNJ","modified_at":"2026-07-07T17:46:46.038225137Z","published_at":"2026-07-07T16:02:53.654510Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1477","https://github.com/jupyter/jupyter_core/security/advisories/GHSA-33p9-3p43-82vq","https://nvd.nist.gov/vuln/detail/CVE-2025-30167","https://github.com/jupyter/jupyter_core/commit/5e8965600adda6b416692ce7e85ecb2bd814bd52","https://github.com/jupyter/jupyter_core","https://pypi.org/project/jupyter-core","https://github.com/advisories/GHSA-33p9-3p43-82vq"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1477","url":"https://osv.dev/vulnerability/PYSEC-2026-1477"}],"summary":"Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability"}