CVE-2021-32798
2 advisories.
PyPI/notebook CVE-2021-32798: critical 10, EPSS 2.11%
Special Element Injection in notebook
Action: Upgrade notebook to 5.7.11 or later.
pip install notebook==5.7.11pip install notebook==6.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.11 | - |
| 6.0.0 | 6.4.1 | - |
Fixed versions
| 5.7.11 | 6.4.1 |
Sources
- osv: GHSA-hwvq-6gjx-j797
- https://github.com/jupyter/notebook/security/advisories/GHSA-hwvq-6gjx-j797
- https://nvd.nist.gov/vuln/detail/CVE-2021-32798
- https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5
- https://github.com/jupyter/notebook
- https://github.com/pypa/advisory-database/tree/main/vulns/notebook/PYSEC-2021-118.yaml
CVE-2021-32798 · published · modified · JSON
PyPI/notebook CVE-2021-32798: unknown, EPSS 2.11%
The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Goog
Action: Upgrade notebook to 5.7.11 or later.
pip install notebook==5.7.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.7.0 | 5.7.11 | - |
Fixed versions
| 5.7.11 |
Sources
- osv: PYSEC-2021-118
- https://github.com/jupyter/notebook/security/advisories/GHSA-hwvq-6gjx-j797
- https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5
CVE-2021-32798 · published · modified · JSON