Debian/jupyter-notebook: medium 6.1
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.
Action: Upgrade jupyter-notebook to 5.7.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.4-1 | - |
Fixed versions
| 5.7.4-1 |
Sources
published · modified · JSON