tocsin

CVE-2022-24758

2 advisories.

PyPI/notebook CVE-2022-24758: high 7.5

Sensitive Auth & Cookie data stored in Jupyter server logs

Action: Upgrade notebook to 6.4.10 or later.

pip install notebook==6.4.10

Affected

introducedfixedlast affected
06.4.10-

Fixed versions

6.4.10

Sources

CVE-2022-24758 · published · modified · JSON

PyPI/notebook CVE-2022-24758: unknown

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i

Action: Upgrade notebook to 6.4.10 or later.

pip install notebook==6.4.10

Affected

introducedfixedlast affected
06.4.10-

Fixed versions

6.4.10

Sources

CVE-2022-24758 · published · modified · JSON