PyPI/jupyter-server CVE-2022-24757: high 7.5, EPSS 1.27%

Insertion of Sensitive Information into Log File in Jupyter notebook

Action: Upgrade jupyter-server to 1.15.4 or later.

pip install jupyter-server==1.15.4

Affected

Fixed versions

Sources

• osv: GHSA-p737-p57g-4cpr
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-p737-p57g-4cpr
• https://nvd.nist.gov/vuln/detail/CVE-2022-24757
• https://github.com/jupyter-server/jupyter_server/commit/a5683aca0b0e412672ac6218d09f74d44ca0de5a
• https://github.com/jupyter-server/jupyter_server
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2022-179.yaml

CVE-2022-24757 · published 2022-03-25T19:20:39Z · modified 2023-11-08T04:08:35.307839Z · JSON