41 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-40170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on /files/ URLs could allow exposure of certain file contents,...
Fedora: Security Advisory (FEDORA-2023-3d77cfc654)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : python-jupyter-server (2023-88c411e973)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-88c411e973 advisory. Security fix for python-jupyter-server. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
geometron (>=0.0.1.dev7, <=0.0.3) potentially affected by CVE-2023-40170 via jupyter-server (1.11.1)
jupyter-server PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - geometron =0.0.1.dev7, =0.0.3 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
ipyflow (>=0.0.160, <=0.0.170), peak-finder-app (0.1.0a1) potentially affected by CVE-2023-40170 via jupyter-server (1.23.6)
jupyter-server PYPI version 1.23.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - ipyflow =0.0.160, =0.0.170 - peak-finder-app 0.1.0a1 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
xircuits (1.3.0) potentially affected by CVE-2023-40170 via jupyter-server (1.15.4)
jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
image-crawl (0.1.0), vimms (2.0.1) +1 more potentially affected by CVE-2023-40170 via jupyter-server (1.10.2)
jupyter-server PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - image-crawl 0.1.0 - vimms 2.0.1 - xircuits =1.0.0, =1.2.0 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
cadpr (>=0.1.0, <=0.1.1), cfnow (>=0.0.1, <=0.0.6) +30 more potentially affected by CVE-2023-40170 via jupyter-server (>=2.0.0rc3, <=2.7.0)
jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.0.1, =0.0.1, =0.2.0.dev0, =0.0.2, =0.1.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.1 and more Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2023-40170 via jupyter-server (1.16.0)
jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2023-40170 via jupyter-server (0.2.1)
jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4), aepsych (>=0.3.0, <=0.4.0) +202 more potentially affected by CVE-2023-40170 via jupyter-server (1.24.0)
jupyter-server PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - acryl-datahub-gx-plugin =0.14.0.3rc1, =0.3.0, =0.1.0b0, =0.1.0, =0.2.2, =0.0.2, =0.0.2, =0.1.0, =0.2.0, =0.3.0 -...
aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2023-40170 via jupyter-server (1.15.6)
jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...
jupyterlab-tabnine (>=0.0.1, <=0.0.19) potentially affected by CVE-2023-40170 via jupyter-server (1.6.4)
jupyter-server PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - jupyterlab-tabnine =0.0.1, =0.0.19 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2023-40170 via jupyter-server (1.23.4)
jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2023-40170 via jupyter-server (1.17.0)
jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2023-40170 via jupyter-server (0.0.5)
jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
immersim (1.0.3) potentially affected by CVE-2023-40170 via jupyter-server (1.23.1)
jupyter-server PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - immersim 1.0.3 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2023-40170 via jupyter-server (0.1.1)
jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2023-40170 Source advisory:...
voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2023-40170 via jupyter-server (0.3.0)
jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2023-40170 Source advisory: OSV:GHSA-64X5-55RW-9974...
