CVE catalog

CVE-2022-21699

ipython: CVE-2022-21699

Severity: High · CVSS 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published: Jan 19, 2022, 10:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.65% · Oct 25, 2026

IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerability achieved by not properly managing cross user temporary files. This vulnerability allows one user to run code as another on the same machine. All users are advised to upgrade.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	ipython	sid	`9.11.0-3`	fixed
Debian	ipython	forky	`9.11.0-3`	fixed
Debian	ipython	trixie	`8.35.0-1`	fixed
Debian	ipython	bookworm	`8.5.0-4`	fixed
Suse	python-ipython	package hub 15 sp3	`7.13.0-bp153.2.6.1`	fixed
Suse	python-ipython-test	package hub 15 sp3	`7.13.0-bp153.2.6.6`	fixed
Opensuse	python-ipython	leap 15.3	`7.13.0-bp153.2.6.1`	fixed
Opensuse	python-ipython-test	leap 15.3	`7.13.0-bp153.2.6.6`	fixed
Ubuntu	ipython	pro	`5.8.0-1`	vulnerable
Ubuntu	ipython	pro	`5.8.0-1build1`	vulnerable
Ubuntu	ipython	pro	`5.8.0-2`	vulnerable
Ubuntu	ipython	pro	`7.12.0-1`	vulnerable
Ubuntu	ipython	pro	`7.13.0-1`	vulnerable
Ubuntu	ipython	pro	`7.13.0-1ubuntu0.1~esm1`	fixed
Opensuse	python-ipython	tumbleweed	`8.31.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	ipython	source	sid	`7.31.1-1`	not yet assigned	Not reported	[1004122]
Debian	ipython	source	forky	`7.31.1-1`	not yet assigned	Not reported	[1004122]
Debian	ipython	source	trixie	`7.31.1-1`	not yet assigned	Not reported	[1004122]
Debian	ipython	source	bookworm	`7.31.1-1`	not yet assigned	Not reported	[1004122]
Suse	python-ipython	rpm	package hub 15 sp3	`7.13.0-bp153.2.6.1`	Not reported	OPENSUSE-SU-2022:10043-1	Not reported
Suse	python-ipython-test	rpm	package hub 15 sp3	`7.13.0-bp153.2.6.6`	Not reported	OPENSUSE-SU-2022:10043-1	Not reported
Opensuse	python-ipython	rpm	leap 15.3	`7.13.0-bp153.2.6.1`	Not reported	OPENSUSE-SU-2022:10043-1	Not reported
Opensuse	python-ipython-test	rpm	leap 15.3	`7.13.0-bp153.2.6.6`	Not reported	OPENSUSE-SU-2022:10043-1	Not reported
Ubuntu	ipython	deb	pro	`7.13.0-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2022-21699	Not reported
Opensuse	python-ipython	rpm	tumbleweed	`8.31.0-1.1`	Not reported	OPENSUSE-SU-2025:14718-1	Not reported

[Debian bug #1004122]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[python313-ipython]Unknown
Source package: [python-ipython]
Details (1)
- 9.10.0-1.4 · noarch · tumbleweed
  Unknown · Fixed: 8.31.0-1.1
  Version impact unknown
  dsa · python-ipython · opensuse · tumbleweed
[python314-ipython]Unknown
Source package: [python-ipython]
Details (1)
- 9.10.0-1.4 · noarch · tumbleweed
  Unknown · Fixed: 8.31.0-1.1
  Version impact unknown
  dsa · python-ipython · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[ipython3]Fixed
Source package: [ipython]
Details (2)
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm
[python3-ipython]Fixed
Source package: [ipython]
Details (2)
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm
[python-ipython-doc]Fixed
Source package: [ipython]
Details (2)
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm
- 8.5.0-4 · all · bookworm
  Fixed · Fixed: 7.31.1-1
  dsa · ipython · debian · bookworm

Observed: Oct 23, 2026, 6:24:09 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]