Fedora 38 : python-nbclient / python-nbconvert (2022-b910e3473f)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-b910e3473f advisory. New versions of nbclient and nbconvert. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

[SECURITY] [DLA 3863-1] nbconvert security update

Debian LTS Advisory DLA-3863-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin September 02, 2024 https://wiki.debian.org/LTS Package : nbconvert Version : 5.6.1-3+deb11u1 CVE ID : CVE-2021-32862 Alvaro Muñoz from the GitHub Security Lab discovered sixteen ways to...

Debian dla-3863 : jupyter-nbconvert - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3863 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3863-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3442-1] nbconvert security update

Debian LTS Advisory DLA-3442-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin June 03, 2023 https://wiki.debian.org/LTS Package : nbconvert Version : 5.4-2+deb10u1 CVE ID : CVE-2021-32862 Alvaro Muñoz from the GitHub Security Lab discovered sixteen ways to exploit...

Debian dla-3442 : jupyter-nbconvert - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3442 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3442-1 [email protected] https://www.debian.org/lts/security/...

CVE-2021-32862

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...

CVE-2021-32862 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2021-32862 nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting XSS vulnerabilities if the...

CVE-2021-32862

CVE-2021-32862 is a cross-site scripting (XSS) vulnerability in nbconvert when generating HTML from user-controlled notebooks. The GitHub Security Lab disclosed sixteen routes to inject arbitrary HTML into HTML exports (e.g., nbviewer). Connected advisories confirm nbconvert is affected and provi...

abracadabra (>=0.0.0 <=0.0.7), ai-economist (>=1.0.0 <=1.7.1) +206 more potentially affected by CVE-2021-32862 via nbconvert (>=4.2.0 <=6.5.0)

nbconvert PYPI version =4.2.0, =0.0.0, =1.0.0, =1.3.4, =0.18.3, =1.0.0, =0.1.1, =1.0.1, =0.0.1, =1.13.0.post1, =1.0.0, =0.1.0.dev2021118, =0.0.0, =0.3.4, =0.3.8 and more Source cves: CVE-2021-32862 Source advisory: OSV:GHSA-9JMQ-RX5F-8JWQ...