CVE-2022-29238

Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with ContentsManager.allowhidden = False only prevented listing the contents of hidden directories, not accessing individual hidden files or files...

Linux Distros Unpatched Vulnerability : CVE-2022-29238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with...

SUSE CVE-2022-29238

Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with ContentsManager.allowhidden = False only prevented listing the contents of hidden directories, not accessing individual hidden files or files...

Mageia: Security Advisory (MGASA-2022-0323)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5585-1: Jupyter Notebook vulnerabilities

It was discovered that Jupyter Notebook incorrectly handled certain notebooks. An attacker could possibly use this issue of lack of Content Security Policy in Nbconvert to perform cross-site scripting XSS attacks on the notebook server. This issue only affected Ubuntu 18.04 LTS. CVE-2018-19351 It...

vizic (>=0.1.0, <=0.2.0.dev1) potentially affected by CVE-2022-29238 via notebook (4.2.3)

notebook PYPI version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - vizic =0.1.0, =0.2.0.dev1 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

fairing (>=0.0.2, <=0.0.3), mmtfpyspark (0.2.7) potentially affected by CVE-2022-29238 via notebook (5.6.0)

notebook PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - fairing =0.0.2, =0.0.3 - mmtfpyspark 0.2.7 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

shear-psf-leakage (>=0.1.6, <=0.2.1) potentially affected by CVE-2022-29238 via notebook (5.7.4)

notebook PYPI version 5.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - shear-psf-leakage =0.1.6, =0.2.1 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

artificienlib (>=0.1.1, <=0.1.6), databrickslabs-jupyterlab (>=1.0.0rc0, <=1.0.5) +2 more potentially affected by CVE-2022-29238 via notebook (5.7.8)

notebook PYPI version 5.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - artificienlib =0.1.1, =1.0.0rc0, =0.2.7, =0.2.9 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

nbfancy (0.1.0a3) potentially affected by CVE-2022-29238 via notebook (5.7.10)

notebook PYPI version 5.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - nbfancy 0.1.0a3 Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

3deecelltracker (>=0.5.0a0, <=1.0.0), abracadabra (>=0.0.0, <=0.0.7) +85 more potentially affected by CVE-2022-29238 via notebook (>=6.0.0, <=6.4.11)

notebook PYPI version =6.0.0, =0.5.0a0, =0.0.0, =1.0.0, =1.0.1, =0.0.48, =1.0.0, =0.3.4, =0.1.0rc1, =0.2.0, =0.0.1, =0.2.1 - corradin-opioid-project 0.1.0 and more Source cves: CVE-2022-29238 Source advisory: OSV:GHSA-V7VQ-3X77-87VG...

arpes (>=1.0.0, <=2.2.0), convert-and-download (>=0.1.3, <=0.2.4) +12 more potentially affected by CVE-2022-29238 via notebook (5.7.16)

notebook PYPI version 5.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - arpes =1.0.0, =0.1.3, =1.0.0b1, =1.31.7.dev0, =0.1.1.10, =0.1.6.2, =0.1.0, =2.0.0, =1.0.1, =0.1.1, =0.1.0, =0.1.0, =0.3.0 Source cves:...

sensiml (>=2.5.6, <=2021.11.12) potentially affected by CVE-2022-29238 via notebook (5.7.5)

notebook PYPI version 5.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - sensiml =2.5.6, =2021.11.12 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

nbfancy (0.1.0a3) potentially affected by CVE-2022-29238 via notebook (5.7.10)

notebook PYPI version 5.7.10 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - nbfancy 0.1.0a3 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

arpes (>=1.0.0, <=2.2.0), convert-and-download (>=0.1.3, <=0.2.4) +12 more potentially affected by CVE-2022-29238 via notebook (5.7.16)

notebook PYPI version 5.7.16 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - arpes =1.0.0, =0.1.3, =1.0.0b1, =1.31.7.dev0, =0.1.1.10, =0.1.6.2, =0.1.0, =2.0.0, =1.0.1, =0.1.1, =0.1.0, =0.1.0, =0.3.0 Source cves:...

3deecelltracker (>=0.5.0a0, <=1.0.0), abracadabra (>=0.0.0, <=0.0.7) +85 more potentially affected by CVE-2022-29238 via notebook (>=6.0.0, <=6.4.11)

notebook PYPI version =6.0.0, =0.5.0a0, =0.0.0, =1.0.0, =1.0.1, =0.0.48, =1.0.0, =0.3.4, =0.1.0rc1, =0.2.0, =0.0.1, =0.2.1 - corradin-opioid-project 0.1.0 and more Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

artificienlib (>=0.1.1, <=0.1.6), databrickslabs-jupyterlab (>=1.0.0rc0, <=1.0.5) +2 more potentially affected by CVE-2022-29238 via notebook (5.7.8)

notebook PYPI version 5.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - artificienlib =0.1.1, =1.0.0rc0, =0.2.7, =0.2.9 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

ipynb-path (>=0.1.2, <=0.1.3), jupyter-kernel-gateway (>=0.5.0, <=1.2.2) potentially affected by CVE-2022-29238 via notebook (4.4.1)

notebook PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - ipynb-path =0.1.2, =0.5.0, =1.2.2 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

mumot (>=1.0.0, <=1.1.2) potentially affected by CVE-2022-29238 via notebook (5.4.1)

notebook PYPI version 5.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - mumot =1.0.0, =1.1.2 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...

shear-psf-leakage (>=0.1.6, <=0.2.1) potentially affected by CVE-2022-29238 via notebook (5.7.4)

notebook PYPI version 5.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - shear-psf-leakage =0.1.6, =0.2.1 Source cves: CVE-2022-29238 Source advisory: OSV:PYSEC-2022-212...