{"action":"Upgrade notebook to 5.7.8 or later.","affected":[{"fixed":"5.7.8","introduced":"0"}],"component":"notebook","cve_ids":["CVE-2019-10856"],"ecosystem":"PyPI","epss":0.01264,"exploited":false,"fixed_versions":["5.7.8"],"ghsa_id":"GHSA-rcx2-m7jp-p9wj","id":"tcs_01M5KG8NHBJGDMTZ7897JSZ99Z","modified_at":"2023-11-08T04:00:58.335604Z","published_at":"2019-04-04T16:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-158","https://github.com/jupyter/notebook/compare/16cf97c...b8e30ea","https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4","https://github.com/advisories/GHSA-rcx2-m7jp-p9wj"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-158","url":"https://osv.dev/vulnerability/PYSEC-2019-158"}],"summary":"In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255."}