fairing (>=0.0.2, <=0.0.3), hugo-jupyter (>=0.2.1, <=0.3.0) +5 more potentially affected by CVE-2019-9644 via notebook (>=5.0.0, <=5.7.5)

notebook PYPI version =5.0.0, =0.0.2, =0.2.1, =1.0.0, =2.5.6, =0.1.6, =0.2.1 - sphinx-markdown-builder 0.0.5 Source cves: CVE-2019-9644 Source advisory: OSV:PYSEC-2019-159...

PYSEC-2019-159

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

UBUNTU-CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

Cross site scripting

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

DEBIAN-CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

vizic (>=0.1.0, <=0.2.0.dev1) potentially affected by CVE-2019-9644 via notebook (4.2.3)

notebook PYPI version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on notebook and may be impacted: - vizic =0.1.0, =0.2.0.dev1 Source cves: CVE-2019-9644 Source advisory: OSV:PYSEC-2019-159...

fairing (>=0.0.2, <=0.0.3), hugo-jupyter (>=0.2.1, <=0.3.0) +8 more potentially affected by CVE-2019-9644 via notebook (>=4.2.3, <=5.7.5)

notebook PYPI version =4.2.3, =0.0.2, =0.2.1, =0.1.2, =0.5.0, =1.0.0, =2.5.6, =0.1.6, =0.1.0, =0.2.0.dev1 Source cves: CVE-2019-9644 Source advisory: MEND:CVE-2019-9644...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

CVE-2019-9644

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

CVE-2019-9644

Jupyter Notebook before 5.7.6 is affected by an XSSI vulnerability that allows inclusion of resources on malicious pages when users are authenticated to a Jupyter server. The issue arises from improper handling of cross-site script inclusion and can lead to exposure of resource contents (notably ...

PT-2019-19771

Name of the Vulnerable Software and Affected Versions Jupyter Notebook versions prior to 5.7.6 Description A cross-site inclusion issue allows malicious pages to include resources when visited by authenticated users of a Jupyter server. This can lead to access of resource content, particularly...

Jupyter Notebook Access Restriction Bypass Vulnerability

Jupyter Notebook is a suite of open source web applications for creating and sharing code and illustrative text documents. An access restriction bypass vulnerability exists in Jupyter Notebook, which can be exploited by an attacker to bypass access restrictions and obtain sensitive information...

CVE-2019-9644: Improper Neutralization of Input During Web Page Generation

An XSSI cross-site inclusion vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of erro...

Jupyter notebook -- cross-site inclusion (XSSI) vulnerability

Jupyter notebook Changelog: 5.7.6 contains a security fix for a cross-site inclusion XSSI vulnerability, where files at a known URL could be included in a page from an unauthorized website if the user is logged into a Jupyter server. The fix involves setting the X-Content-Type-Options: nosniff...

sh.jove:jove-jupyter-frontend_2.10 (0.1.0), sh.jove:jove-jupyter-frontend_2.11 (0.1.0) +2 more potentially affected by CVE-2018-18893 via com.hubspot.jinjava:jinjava (1.0.3)

com.hubspot.jinjava:jinjava MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hubspot.jinjava:jinjava and may be impacted: - sh.jove:jove-jupyter-frontend2.10 0.1.0 - sh.jove:jove-jupyter-frontend2.11 0.1.0 -...

Fedora 29 : python-notebook (2018-b792d607fd)

Update to 5.7.2, fix CVE-2018-19351, CVE-2018-19352 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 28 : python-notebook (2018-1fdcb294e3)

Security fix for CVE-2018-8768 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora Update for python-notebook FEDORA-2018-b9581d9624

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 28 Update: python-notebook-5.5.0-6.fc28

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...