CVE-2021-41134

4 advisories.

PyPI/nbdime CVE-2021-41134: high 8.7, EPSS 0.70%

Stored XSS in Jupyter nbdime

Action: Upgrade nbdime to 1.1.1 or later.

pip install nbdime==1.1.1

pip install nbdime==2.1.1

pip install nbdime==3.1.1

Affected

introduced	fixed	last affected
0	1.1.1	-
2.0.0	2.1.1	-
3.0.0	3.1.1	-

Fixed versions

1.1.1

2.1.1

3.1.1

Sources

CVE-2021-41134 · published 2021-11-08T18:09:27Z · modified 2026-07-08T06:27:23.429525263Z · JSON

npm/nbdime CVE-2021-41134: high 8.7, EPSS 0.70%

Stored XSS in Jupyter nbdime

Action: Upgrade nbdime to 5.0.2 or later.

npm i nbdime@5.0.2

npm i nbdime@6.1.2

Affected

introduced	fixed	last affected
0	5.0.2	-
6.0.0	6.1.2	-

Fixed versions

5.0.2

6.1.2

Sources

CVE-2021-41134 · published 2021-11-08T18:09:27Z · modified 2026-07-08T06:27:23.429525263Z · JSON

npm/nbdime-jupyterlab CVE-2021-41134: high 8.7, EPSS 0.70%

Stored XSS in Jupyter nbdime

Action: Upgrade nbdime-jupyterlab to 1.0.1 or later.

npm i nbdime-jupyterlab@1.0.1

npm i nbdime-jupyterlab@2.1.1

Affected

introduced	fixed	last affected
0	1.0.1	-
2.0.0	2.1.1	-

Fixed versions

1.0.1

2.1.1

Sources

CVE-2021-41134 · published 2021-11-08T18:09:27Z · modified 2026-07-08T06:27:23.429525263Z · JSON

PyPI/nbdime CVE-2021-41134: unknown, EPSS 0.70%

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting (XSS) issue exists within the Jupyter-owned nbdime project. It appears that when

Action: Upgrade nbdime to 1.1.1 or later.

pip install nbdime==1.1.1

pip install nbdime==2.1.1

pip install nbdime==3.1.1

Affected

introduced	fixed	last affected
0	1.1.1	-
2.0.0	2.1.1	-
3.0.0	3.1.1	-

Fixed versions

1.1.1

2.1.1

3.1.1

Sources

CVE-2021-41134 · published 2021-11-03T18:15:00Z · modified 2023-11-08T04:06:52.416770Z · JSON