PyPI/jupyterlite-core: high 8.1
HTML injection in JupyterLite leading to DOM Clobbering
Action: Upgrade jupyterlite-core to 0.4.1 or later.
pip install jupyterlite-core==0.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.1 | - |
Fixed versions
| 0.4.1 |
Sources
- osv: GHSA-gj55-2xf9-67rq
- https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2
- https://github.com/jupyterlite/jupyterlite/security/advisories/GHSA-gj55-2xf9-67rq
- https://github.com/jupyterlite/jupyterlite
published · modified · JSON