Debian/jupyter-notebook: medium 6.1
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconvert endpoints can ex
Action: Upgrade jupyter-notebook to 5.7.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.4-1 | - |
Fixed versions
| 5.7.4-1 |
Sources
- osv: DEBIAN-CVE-2018-19351#Debian:13/jupyter-notebook
- https://security-tracker.debian.org/tracker/CVE-2018-19351
published · modified · JSON