notebook@7.2.0rc0 vulnerabilities
Jupyter Notebook - A web-based notebook environment for interactive computing
-
latest version
7.2.2
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
3 months ago
-
licenses detected
- [7.0.0a5,)
Direct Vulnerabilities
Known vulnerabilities in the notebook package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. Affected versions of this package are vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Attackers can trick the user to open a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature, which will allow them to access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. How to fix Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')? Upgrade |
[7.0.0,7.2.2)
|