voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2020-26232 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2020-26232 Source advisory: OSV:GHSA-GRFJ-WJV9-4F9V...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2020-26232 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2020-26232 Source advisory: OSV:GHSA-GRFJ-WJV9-4F9V...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2020-26232 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2020-26232 Source advisory: OSV:GHSA-GRFJ-WJV9-4F9V...

CVE-2020-26232

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2020-26232 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-26232 Source advisory:...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2020-26232 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2020-26232 Source advisory: OSV:PYSEC-2020-234...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2020-26232 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2020-26232 Source advisory: OSV:PYSEC-2020-234...

CVE-2020-26232

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known...

CVE-2020-26232

CVE-2020-26232 affects Jupyter Server prior to 1.0.6, where an open redirect vulnerability could cause a browser to be redirected to a spoofed site via a malicious link. The issue applies to all Jupyter servers in principle, but exploit links can be constructed primarily for known hosts. The most...