CVE-2022-24757
2 advisories.
PyPI/jupyter-server CVE-2022-24757: high 7.5
Insertion of Sensitive Information into Log File in Jupyter notebook
Action: Upgrade jupyter-server to 1.15.4 or later.
pip install jupyter-server==1.15.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.4 | - |
Fixed versions
| 1.15.4 |
Sources
- osv: GHSA-p737-p57g-4cpr
- https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-p737-p57g-4cpr
- https://nvd.nist.gov/vuln/detail/CVE-2022-24757
- https://github.com/jupyter-server/jupyter_server/commit/a5683aca0b0e412672ac6218d09f74d44ca0de5a
- https://github.com/jupyter-server/jupyter_server
- https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2022-179.yaml
CVE-2022-24757 · published · modified · JSON
PyPI/jupyter-server CVE-2022-24757: unknown
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Action: Upgrade jupyter-server to 1.15.4 or later.
pip install jupyter-server==1.15.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.4 | - |
Fixed versions
| 1.15.4 |
Sources
- osv: PYSEC-2022-179
- https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-p737-p57g-4cpr
- https://github.com/jupyter-server/jupyter_server/commit/a5683aca0b0e412672ac6218d09f74d44ca0de5a
CVE-2022-24757 · published · modified · JSON