CVE-2021-39160

nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path. Due to unsanitized input, visiting maliciously crafted links could result in arbitrary code execution in the user environment. This has been resolved in version 0.10.2 and all users are advised to upgrade. No work around exist for users who can not upgrade.

• CWE-94
• CWE-78

• https://github.com/jupyterhub/nbgitpuller/blob/main/CHANGELOG.md#0102---2021-08-25Release Notes, Third Party Advisory
• https://github.com/jupyterhub/nbgitpuller/commit/07690644f29a566011dd0d7ba14cae3eb0490481Patch, Third Party Advisory
• https://github.com/jupyterhub/nbgitpuller/security/advisories/GHSA-mq5p-2mcr-m52jThird Party Advisory
• https://github.com/jupyterhub/nbgitpuller/blob/main/CHANGELOG.md#0102---2021-08-25Release Notes, Third Party Advisory
• https://github.com/jupyterhub/nbgitpuller/commit/07690644f29a566011dd0d7ba14cae3eb0490481Patch, Third Party Advisory
• https://github.com/jupyterhub/nbgitpuller/security/advisories/GHSA-mq5p-2mcr-m52jThird Party Advisory

Published

Aug 25, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39155Istio is an open source platform for providing a uniform way…7.5
• CVE-2021-39156Istio is an open source platform for providing a uniform way…7.5
• CVE-2021-39157detect-character-encoding is an open source character encodi…7.5
• CVE-2021-39158NVCaffe's python required dependencies list used to contain …8.8
• CVE-2021-39159BinderHub is a kubernetes-based cloud service that allows us…9.8
• CVE-2021-3916bookstack is vulnerable to Improper Limitation of a Pathname…6.5
• CVE-2021-39161Discourse is an open source platform for community discussio…5.4
• CVE-2021-39162Pomerium is an open source identity-aware access proxy. Envo…8.6
• CVE-2021-39163Matrix is an ecosystem for open federated Instant Messaging …3.1
• CVE-2021-39164Matrix is an ecosystem for open federated Instant Messaging …3.1
• CVE-2021-39165Cachet is an open source status page. With Cachet prior to a…6.5
• CVE-2021-39166Pimcore is an open source data & experience management platf…5.4