PyPI/nbconvert CVE-2021-32862: unknown, EPSS 1.52%
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is po
Action: Upgrade nbconvert to 6.3.0a0 or later.
pip install nbconvert==6.3.0a0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.3.0a0 | - |
Fixed versions
| 6.3.0a0 |
Sources
- osv: PYSEC-2022-249
- https://github.com/jupyter/nbconvert/security/advisories/GHSA-9jmq-rx5f-8jwq
- https://github.com/jupyter/nbviewer/security/advisories/GHSA-h274-fcvj-h2wm
CVE-2021-32862 · published · modified · JSON