CVE-2019-7539
ipycache is vulnerable to Code Injection
A code injection issue was discovered in ipycache through 2016-05-31.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
A code injection issue was discovered in ipycache through 2016-05-31.
- Record
CVE-2019-7539- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-502
- Updated
- 2026-11-02
CVE List No score
A code injection issue was discovered in ipycache through 2016-05-31.
- Record
CVE-2019-7539- Updated
- 2026-11-02
EUVDEUVD-2019-0066 No score
A code injection issue was discovered in ipycache through 2016-05-31.
- Record
EUVD-2019-0066- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gcm4-q2pg-xw89
9.4
ipycache is vulnerable to Code Injection
A code injection issue was discovered in ipycache versions up to 0.1.4.
- Record
GHSA-gcm4-q2pg-xw89- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-94, CWE-502
- Updated
- 2026-11-02
OSVGHSA-gcm4-q2pg-xw89
9.4
ipycache is vulnerable to Code Injection
A code injection issue was discovered in ipycache versions up to 0.1.4.
- Record
GHSA-gcm4-q2pg-xw89- CVSS 4.0
- 9.4 Critical
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-502, CWE-94
- Updated
- 2026-11-02
OSVPYSEC-2019-180 No score
A code injection issue was discovered in ipycache through 2016-05-31.
- Record
PYSEC-2019-180- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-7539 is a high vulnerability (CVSS 8.8) in Ipycache Project Ipycache, published March 21, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 76th percentile. No source names a fixed version.
References
github.com/rossant/ipycache/issues/47
nvd.nist.gov/vuln/detail/CVE-2019-7539
github.com/advisories/GHSA-gcm4-q2pg-xw89
github.com/adi928/ipycache/commit/9cc7cb891ff169b3e8a6f5e84afd8238f566ad8e
github.com/adi928/ipycache/commit/c73a726744c90cc2cb200b159edbaf5deddcb753
github.com/pypa/advisory-database/tree/main/vulns/ipycache/PYSEC-2019-180.yaml
github.com/rossant/ipycache