tocsin

Debian/jupyter-notebook: high 7.8

In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after saniti

Action: Upgrade jupyter-notebook to 5.4.1-1 or later.

Affected

introducedfixedlast affected
05.4.1-1-

Fixed versions

5.4.1-1

Sources

published · modified · JSON