openSUSE: Security Advisory for python (openSUSE-SU-2022:10075-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2023-0060)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2023-0060 Updated python-jupyterlab packages fix security vulnerability

Remote code execution, but requires user action to open a notebook. CVE-2021-32797, and other bug fixes...

openSUSE 15 Security Update : python-jupyterlab (openSUSE-SU-2022:10075-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:10075-1 advisory. - JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted...

Security update for python-jupyterlab (important)

openSUSE Security Update: Security update for python-jupyterlab Announcement ID: openSUSE-SU-2022:10075-1 Rating: important References: 1196663 Cross-References: CVE-2021-32797 CVSS scores: CVE-2021-32797 NVD : 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: openSUSE Backports...

corradin-opioid-project (=0.1.0), eflow (=0.1.3) +7 more potentially affected by CVE-2021-32797 via jupyterlab (>=0.31.1 <=1.1.4)

jupyterlab PYPI version =0.31.1, =0.9.0, =0.1.1, =0.2.41, =0.2.90 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

3deecelltracker (=1.0.0), abracadabra (>=0.0.0 <=0.0.7) +64 more potentially affected by CVE-2021-32797 via notebook (>=6.0.0 <=6.4.0)

notebook PYPI version =6.0.0, =0.0.0, =1.0.0, =1.0.1, =1.0.0, =0.3.4, =0.1.0rc1, =0.0.1, =0.0.4, =1.0.2rc8, =2.1.0rc4 and more Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

fairing (>=0.0.2 <=0.0.3), hugo-jupyter (>=0.2.1 <=0.3.0) +7 more potentially affected by CVE-2021-32797 via notebook (>=4.2.3 <=5.7.10)

notebook PYPI version =4.2.3, =0.0.2, =0.2.1, =0.1.2, =0.5.0, =1.0.0, =0.1.0, =0.2.0.dev1 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

jupyterlab-scheduler (>=0.1.4 <=0.1.5), jupyterlab-unfold (>=0.1.0 <=0.1.2) +2 more potentially affected by CVE-2021-32797 via jupyterlab (>=3.1.0a10 <=3.1.19)

jupyterlab PYPI version =3.1.0a10, =0.1.4, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

atacworks (>=0.3.0 <=0.3.3), chronix2grid (>=0.1.0rc1 <=1.0.2) +11 more potentially affected by CVE-2021-32797 via jupyterlab (>=2.0.1 <=2.2.1)

jupyterlab PYPI version =2.0.1, =0.3.0, =0.1.0rc1, =0.8.14, =0.1.0, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.0.4, =0.3.0, =0.2.0, =0.0.4, =0.0.14 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

jupyterlab-scheduler (>=0.1.4 <=0.1.5), jupyterlab-unfold (>=0.1.0 <=0.1.2) +2 more potentially affected by CVE-2021-32797 via jupyterlab (>=3.1.0a10 <=3.1.19)

jupyterlab PYPI version =3.1.0a10, =0.1.4, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2021-32797 Source advisory: OSV:PYSEC-2021-130...

corradin-opioid-project (=0.1.0), eflow (=0.1.3) +7 more potentially affected by CVE-2021-32797 via jupyterlab (>=0.31.1 <=1.1.4)

jupyterlab PYPI version =0.31.1, =0.9.0, =0.1.1, =0.2.41, =0.2.90 Source cves: CVE-2021-32797 Source advisory: OSV:PYSEC-2021-130...

CVE-2021-32797

CVE-2021-32797 (JupyterLab) is a remote code execution vulnerability where untrusted notebooks can run code on load due to lack of sanitization of the HTML form action attribute. Exploitation requires the user to open a specially crafted notebook, i.e., user action is required. Public sources in ...