CVE-2021-41247

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

PYSEC-2021-386

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

Open redirect

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

CVE-2021-41247 incomplete logout in JupyterHub

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

CVE-2021-41247

CVE-2021-41247 affects JupyterHub, where users with multiple JupyterLab tabs in a single browser session may experience incomplete logout from the single-user server, as fresh credentials are reinstated if another active JupyterLab session remains open during logout. The issue is mitigated by upg...

CVE-2021-41247

JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials for the single-user server only, not the Hub reinstated...

JupyterHub 代码问题漏洞

JupyterHub is a multi-user server for Jupyter. A security vulnerability exists in JupyterHub that stems from the fact that in affected versions, users with multiple JupyterLab tabs open in the same browser session may see an incomplete logout from a single-user server because the new credentials...

PT-2021-23211 · Unknown · Jupyterlab +1

Name of the Vulnerable Software and Affected Versions: JupyterHub versions prior to 1.5 Description: The issue affects users of JupyterLab with JupyterHub who have multiple JupyterLab tabs open in the same browser session. When logging out, fresh credentials for the single-user server are...

jupyterlab-git (>=0.30.0b1 <=0.30.0b3) potentially affected by CVE-2021-41134 via nbdime (=3.0.0)

nbdime PYPI version =3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nbdime and may be impacted: - jupyterlab-git =0.30.0b1, =0.30.0b3 Source cves: CVE-2021-41134 Source advisory: OSV:PYSEC-2021-428...

cadlabs-ethereum-economic-model (=0.0.2a0), humlab-inidun (>=0.3.8 <=0.3.10) +3 more potentially affected by CVE-2021-32797 via jupyterlab (>=3.0.14 <=3.0.16)

jupyterlab PYPI version =3.0.14, =0.3.8, =0.5.10, =0.1.4, =0.1.5 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

jupyterlab-scheduler (>=0.1.4 <=0.1.5), jupyterlab-unfold (>=0.1.0 <=0.1.2) +2 more potentially affected by CVE-2021-32797 via jupyterlab (>=3.1.0a10 <=3.1.19)

jupyterlab PYPI version =3.1.0a10, =0.1.4, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

atacworks (>=0.3.0 <=0.3.3), chronix2grid (>=0.1.0rc1 <=1.0.2) +11 more potentially affected by CVE-2021-32797 via jupyterlab (>=2.0.1 <=2.2.1)

jupyterlab PYPI version =2.0.1, =0.3.0, =0.1.0rc1, =0.8.14, =0.1.0, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.0.4, =0.3.0, =0.2.0, =0.0.4, =0.0.14 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

corradin-opioid-project (=0.1.0), eflow (=0.1.3) +7 more potentially affected by CVE-2021-32797 via jupyterlab (>=0.31.1 <=1.1.4)

jupyterlab PYPI version =0.31.1, =0.9.0, =0.1.1, =0.2.41, =0.2.90 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Impact Untrusted notebook can execute code on load. This is a remote code execution, but requires user action to open a notebook. Patches Patched in the following versions: 3.1.4, 3.0.17, 2.3.2, 2.2.10, 1.2.21. References OWASP Page on Restricting Form Submissions For more information If you have...

GHSA-4952-P58Q-6CRX JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Impact Untrusted notebook can execute code on load. This is a remote code execution, but requires user action to open a notebook. Patches Patched in the following versions: 3.1.4, 3.0.17, 2.3.2, 2.2.10, 1.2.21. References OWASP Page on Restricting Form Submissions For more information If you have...

[ASA-202108-10] jupyterlab: cross-site scripting

Arch Linux Security Advisory ASA-202108-10 ========================================== Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-32797 Package : jupyterlab Type : cross-site scripting Remote : Yes Link : https://security.archlinux.org/AVG-2266 Summary ======= The package jupyterlab before...

CVE-2021-32797

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...

CVE-2021-32797

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...

Design/Logic Flaw

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...

PYSEC-2021-130

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...