ipython

Official repository for IPython itself. Other repos in the IPython organization contain things like the website, documentation builds, etc.

View on Pypi

View on Github

Activity

Latest release: 2w ago
Total releases: 200
Cadence: ~23 days
Last 12 months: 17

Reach

Stars: 16.8k

Details

License: BSD-3-Clause
First release: Jan 05, 2007

Releases

Version	Released
`9.17.1` patch	Sep 01, 2026
`9.17.0` minor	Aug 28, 2026
`9.16.1` patch	Aug 03, 2026
`9.16.0` minor	Jul 31, 2026
`9.15.0` minor	Jun 26, 2026
`9.14.1` patch	Jun 05, 2026
`9.14.0` minor	May 29, 2026
`9.13.0` minor	Apr 24, 2026
`8.39.0` minor	Mar 27, 2026
`9.10.1` patch	Mar 27, 2026
`9.12.0` minor	Mar 27, 2026
`9.11.0` minor	Mar 05, 2026
`9.10.0` minor	Feb 02, 2026
`9.9.0` minor	Jan 05, 2026
`8.38.0` minor	Jan 05, 2026
`9.8.0` minor	Dec 03, 2025
`9.7.0` minor	Nov 05, 2025
`9.6.0` minor	Sep 29, 2025
`9.5.0` minor	Aug 29, 2025
`9.4.0` minor	Jul 01, 2025
`8.37.0` minor	May 31, 2025
`9.3.0` minor	May 31, 2025
`8.36.0` minor	Apr 25, 2025
`9.2.0` minor	Apr 25, 2025
`8.35.0` minor	Apr 07, 2025
`9.1.0` minor	Apr 07, 2025
`9.0.2` patch	Mar 08, 2025
`8.34.0` minor	Mar 08, 2025
`9.0.1` patch	Mar 03, 2025
`8.33.0` minor	Feb 28, 2025
`9.0.0` major	Feb 28, 2025
`9.0.0b2` pre	Feb 26, 2025
`9.0.0b1` pre	Feb 24, 2025
`8.32.0` minor	Jan 31, 2025
`8.31.0` minor	Dec 20, 2024
`8.30.0` minor	Nov 29, 2024
`8.29.0` minor	Oct 25, 2024
`8.28.0` minor	Oct 02, 2024
`8.27.0` minor	Aug 30, 2024
`8.26.0` minor	Jun 28, 2024
`8.25.0` minor	May 31, 2024
`8.24.0` minor	Apr 26, 2024
`8.23.0` minor	Mar 31, 2024
`8.22.2` patch	Mar 04, 2024
`8.22.1` patch	Feb 22, 2024
`8.22.0` minor	Feb 22, 2024
`8.21.0` minor	Jan 31, 2024
`8.20.0` minor	Jan 08, 2024
`8.19.0` minor	Dec 22, 2023
`8.18.1` patch	Nov 27, 2023

1–50 of 200

Repository

ipython/ipython

Forks: 4.5k
Open issues: 1.2k
Language: Python
: 7.6/ 10

ipython
jupyter
data-science
python
hacktoberfest
spec-0

Dependencies (34)

Depends on

9.17.1

Used by

9768

Supply-chain exposure

9,768 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Known CVEs (8)

CVE-2023-24816 PYSEC-2023-17 GHSA-29gw-9793-fvw7 Feb 10, 2023

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Versions prior to 8.1.0 are subject to a command injection vulnerability with very specific prerequisites. This vulnerability requires that the function IPython.utils.terminal.set_term_title be called on Windows in a Python environment where ctypes is not available. The dependency on ctypes in IPython.utils._process_win32 prevents the vulnerable code from ever being reached in the ipython binary. However, as a library that could be used by another tool set_term_title could be called and hence introduce a vulnerability. Should an attacker get untrusted input to an instance of this function they would be able to inject shell commands as current process and limited to the scope of the current process. Users of ipython as a library are advised to upgrade. Users unable to upgrade should ensure that any calls to the IPython.utils.terminal.set_term_title function are done with trusted or filtered input.

Affected versions

0.100.10.10.10.20.110.120.12.10.130.13.10.13.20.6.100.6.110.6.12

+ 146 more Show less

0.6.130.6.140.6.150.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.1.fix10.7.20.7.30.7.4.svn.r20100.8.00.8.10.8.20.8.30.8.40.90.9.11.0.01.1.01.2.01.2.12.0.02.1.02.2.02.3.02.3.12.4.02.4.13.0.03.1.03.2.03.2.13.2.23.2.34.0.04.0.0-b14.0.0b14.0.14.0.24.0.34.1.04.1.0rc14.1.0rc24.1.14.1.24.2.04.2.15.0.05.0.0b15.0.0b25.0.0b35.0.0b45.0.0rc15.1.05.10.05.2.05.2.15.2.25.3.05.4.05.4.15.5.05.6.05.7.05.8.05.9.06.0.06.0.0rc16.1.06.2.06.2.16.3.06.3.16.4.06.5.07.0.07.0.0b17.0.0rc17.0.17.1.07.1.17.10.07.10.17.10.27.11.07.11.17.12.07.13.07.14.07.15.07.16.07.16.17.16.27.16.37.17.07.18.07.18.17.19.07.2.07.20.07.21.07.22.07.23.07.23.17.24.07.24.17.25.07.26.07.27.07.28.07.29.07.3.07.30.07.30.17.31.07.31.17.32.07.33.07.34.07.4.07.5.07.6.07.6.17.7.07.8.07.9.08.0.08.0.0a18.0.0b18.0.0rc18.0.18.1.08.1.18.2.08.3.08.4.08.5.08.6.08.7.08.8.08.9.0

Fixed in

8.10.0

References

https://github.com/ipython/ipython/blob/3f0bf05f072a91b2a3042d23ce250e5e906183fd/IPython/utils/terminal.py#L103-L117
https://github.com/ipython/ipython/commit/385d69325319a5972ee9b5983638e3617f21cb1f
https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7
https://github.com/ipython/ipython/security/advisories/GHSA-29gw-9793-fvw7
https://github.com/ipython/ipython/blob/56e6925dfa50e2c7f4a6471547b8176275db7c25/IPython/utils/_process_win32.py#L20

Updated Feb 22, 2026 · Source: OSV.dev
CVE-2015-7337 GHSA-92mr-v722-f48m PYSEC-2015-25 PYSEC-2015-27 May 17, 2022

Improper Input Validation in Jupyter Notebook

Critical
Network Low None None

The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

Affected versions

0.100.10.10.10.20.110.120.12.10.130.13.10.13.20.6.100.6.110.6.12

+ 37 more Show less

0.6.130.6.140.6.150.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.1.fix10.7.20.7.30.7.4.svn.r20100.8.00.8.10.8.20.8.30.8.40.90.9.11.0.01.1.01.2.01.2.12.0.02.1.02.2.02.3.02.3.12.4.02.4.13.0.03.1.03.2.03.2.1

Fixed in

3.2.2

References

https://nvd.nist.gov/vuln/detail/CVE-2015-7337
https://github.com/ipython/ipython/commit/0a8096adf165e2465550bd5893d7e352544e5967
https://github.com/jupyter/notebook/commit/9e63dd89b603dfbe3a7e774d8a962ee0fa30c0b5
https://bugzilla.redhat.com/show_bug.cgi?id=1264067
https://github.com/advisories/GHSA-92mr-v722-f48m
https://github.com/pypa/advisory-database/tree/main/vulns/ipython/PYSEC-2015-25.yaml

Updated Sep 20, 2024 · Source: OSV.dev
CVE-2015-4706 GHSA-q326-jhw3-699g PYSEC-2017-45 May 17, 2022

Improper Neutralization of Input During Web Page Generation in IPython

Medium
Network Low None

Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.

Affected versions

3.0.03.1.0

Fixed in

3.2.0

References

https://nvd.nist.gov/vuln/detail/CVE-2015-4706
https://github.com/ipython/ipython/commit/7222bd53ad089a65fd610fab4626f9d0ab47dfce
https://github.com/ipython/ipython/commit/c2078a53543ed502efd968649fee1125e0eb549c
https://bugzilla.redhat.com/show_bug.cgi?id=1235688
https://github.com/advisories/GHSA-q326-jhw3-699g
https://github.com/ipython/ipython

Updated Sep 23, 2024 · Source: OSV.dev
CVE-2015-5607 GHSA-7fc2-rm35-2pp7 PYSEC-2017-47 May 17, 2022

IPython vulnerable to cross site request forgery (CSRF)

High
Network Low None

IPython (Interactive Python) is a command shell. Cross-site request forgery in the REST API is possible in in IPython 2 and 3. Versions 2.4.1 and 3.2.3 contain patches.

Affected versions

0.120.12.10.130.13.10.13.21.0.01.1.01.2.01.2.12.0.02.1.02.2.0

+ 8 more Show less

2.3.02.3.12.4.03.0.03.1.03.2.03.2.13.2.2

Fixed in

2.4.13.2.3

References

https://nvd.nist.gov/vuln/detail/CVE-2015-5607
https://github.com/ipython/ipython/commit/1415a9710407e7c14900531813c15ba6165f0816
https://github.com/ipython/ipython/commit/a05fe052a18810e92d9be8c1185952c13fe4e5b0
https://bugzilla.redhat.com/show_bug.cgi?id=1243842
https://github.com/advisories/GHSA-7fc2-rm35-2pp7
https://github.com/ipython/ipython

Updated Sep 27, 2024 · Source: OSV.dev
CVE-2014-3429 GHSA-75cw-5cgv-g853 PYSEC-2014-21 May 14, 2022

IPython Notebook vulnerable to improper validation of the origin of websocket requests

High
Network Low None None

IPython Notebook 0.12 through 1.x before 1.2.0 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

Affected versions

0.120.12.10.130.13.10.13.21.0.01.1.0

Fixed in

1.2.0

References

https://nvd.nist.gov/vuln/detail/CVE-2014-3429
https://github.com/ipython/ipython/pull/4845
https://github.com/ipython/ipython/commit/e5b669ce4750d628dba383fd637dbde918ea15f5
https://github.com/mattvonrocketstein/ipython/commit/dd4135db9f42d196a46553310a8e63ff5658671d
https://bugzilla.redhat.com/show_bug.cgi?id=1119890
https://exchange.xforce.ibmcloud.com/vulnerabilities/94497

Updated Sep 23, 2024 · Source: OSV.dev
CVE-2015-6938 GHSA-4vwq-x64q-j4cj PYSEC-2015-24 PYSEC-2015-26 May 14, 2022

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

Medium
Network Low None

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

Affected versions

0.100.10.10.10.20.110.120.12.10.130.13.10.13.20.6.100.6.110.6.12

+ 37 more Show less

0.6.130.6.140.6.150.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.1.fix10.7.20.7.30.7.4.svn.r20100.8.00.8.10.8.20.8.30.8.40.90.9.11.0.01.1.01.2.01.2.12.0.02.1.02.2.02.3.02.3.12.4.02.4.13.0.03.1.03.2.03.2.1

Fixed in

3.2.2

References

https://nvd.nist.gov/vuln/detail/CVE-2015-6938
https://github.com/ipython/ipython/commit/3ab41641cf6fce3860c73d5cf4645aa12e1e5892
https://github.com/jupyter/notebook/commit/35f32dd2da804d108a3a3585b69ec3295b2677ed
https://github.com/jupyter/notebook/commit/dd9876381f0ef09873d8c5f6f2063269172331e3
https://bugzilla.redhat.com/show_bug.cgi?id=1259405
https://github.com/advisories/GHSA-4vwq-x64q-j4cj

Updated Sep 23, 2024 · Source: OSV.dev
CVE-2015-4707 GHSA-66gw-5xpf-gfp5 PYSEC-2017-46 May 13, 2022

Improper Neutralization of Input During Web Page Generation in IPython

Medium
Network Low None

Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

Affected versions

0.100.10.10.10.20.110.120.12.10.130.13.10.13.20.6.100.6.110.6.12

+ 35 more Show less

0.6.130.6.140.6.150.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.1.fix10.7.20.7.30.7.4.svn.r20100.8.00.8.10.8.20.8.30.8.40.90.9.11.0.01.1.01.2.01.2.12.0.02.1.02.2.02.3.02.3.12.4.02.4.13.0.03.1.0

Fixed in

3.2.0

References

https://nvd.nist.gov/vuln/detail/CVE-2015-4707
https://github.com/ipython/ipython/commit/7222bd53ad089a65fd610fab4626f9d0ab47dfce
https://github.com/ipython/ipython/commit/c2078a53543ed502efd968649fee1125e0eb549c
https://bugzilla.redhat.com/show_bug.cgi?id=1235688
https://github.com/advisories/GHSA-66gw-5xpf-gfp5
https://github.com/ipython/ipython

Updated Sep 23, 2024 · Source: OSV.dev
CVE-2022-21699 GHSA-pq7m-3gw7-gq5x PYSEC-2022-12 Jan 21, 2022

Execution with Unnecessary Privileges in ipython

High
Network Low Low

We’d like to disclose an arbitrary code execution vulnerability in IPython that stems from IPython executing untrusted files in CWD. This vulnerability allows one user to run code as another.

Proof of concept

User1:

mkdir -m 777 /tmp/profile_default mkdir -m 777 /tmp/profile_default/startup echo 'print("stealing your private secrets")' > /tmp/profile_default/startup/foo.py

User2:

cd /tmp ipython

User2 will see:

Python 3.9.7 (default, Oct 25 2021, 01:04:21) Type 'copyright', 'credits' or 'license' for more information IPython 7.29.0 -- An enhanced Interactive Python. Type '?' for help. stealing your private secrets

Patched release and documentation

See https://ipython.readthedocs.io/en/stable/whatsnew/version8.html#ipython-8-0-1-cve-2022-21699,

Version 8.0.1, 7.31.1 for current Python version are recommended. Version 7.16.3 has also been published for Python 3.6 users, Version 5.11 (source only, 5.x branch on github) for older Python versions.

Affected versions

0.100.10.10.10.20.110.120.12.10.130.13.10.13.20.6.100.6.110.6.12

+ 126 more Show less

0.6.130.6.140.6.150.6.40.6.50.6.60.6.70.6.80.6.90.7.00.7.10.7.1.fix10.7.20.7.30.7.4.svn.r20100.8.00.8.10.8.20.8.30.8.40.90.9.11.0.01.1.01.2.01.2.12.0.02.1.02.2.02.3.02.3.12.4.02.4.13.0.03.1.03.2.03.2.13.2.23.2.34.0.04.0.0-b14.0.0b14.0.14.0.24.0.34.1.04.1.0rc14.1.0rc24.1.14.1.24.2.04.2.15.0.05.0.0b15.0.0b25.0.0b35.0.0b45.0.0rc15.1.05.10.05.2.05.2.15.2.25.3.05.4.05.4.15.5.05.6.05.7.05.8.05.9.06.0.06.1.06.2.06.2.16.3.06.3.16.4.06.5.07.0.07.0.0b17.0.0rc17.0.17.1.07.1.17.10.07.10.17.10.27.11.07.11.17.12.07.13.07.14.07.15.07.16.07.16.17.16.27.2.07.3.07.4.07.5.07.6.07.6.17.7.07.8.07.9.07.17.07.18.07.18.17.19.07.20.07.21.07.22.07.23.07.23.17.24.07.24.17.25.07.26.07.27.07.28.07.29.07.30.07.30.17.31.08.0.0

Fixed in

5.117.16.37.31.18.0.1

References

https://github.com/ipython/ipython/security/advisories/GHSA-pq7m-3gw7-gq5x
https://nvd.nist.gov/vuln/detail/CVE-2022-21699
https://github.com/ipython/ipython/commit/46a51ed69cdf41b4333943d9ceeb945c4ede5668
https://github.com/ipython/ipython/commit/5fa1e409d2dc126c456510c16ece18e08b524e5b
https://github.com/ipython/ipython/commit/67ca2b3aa9039438e6f80e3fccca556f26100b4d
https://github.com/ipython/ipython/commit/a06ca837273271b4acb82c29be97c0b6d12a30ea

Updated Sep 10, 2026 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 9
minor 119
patch 55
pre 16

200 releases

Dependencies over time

per release

Release calendar

2026

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More