PyPI/notebook CVE-2022-24758: high 7.5, EPSS 1.11%

Sensitive Auth & Cookie data stored in Jupyter server logs

Action: Upgrade notebook to 6.4.10 or later.

pip install notebook==6.4.10

Affected

Fixed versions

Sources

• osv: GHSA-m87f-39q9-6f55
• https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55
• https://nvd.nist.gov/vuln/detail/CVE-2022-24758
• https://github.com/jupyter/notebook
• https://github.com/pypa/advisory-database/tree/main/vulns/notebook/PYSEC-2022-180.yaml

CVE-2022-24758 · published 2022-04-05T17:47:26Z · modified 2023-12-06T01:02:05.124487Z · JSON