SUSE CVE-2022-29241

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2022-29241 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2022-29241 Source advisory: OSV:GHSA-Q874-G24W-4Q9G...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2022-29241 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2022-29241 Source advisory:...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), appyter (>=0.18.3, <=0.18.11) +61 more potentially affected by CVE-2022-29241 via jupyter-server (>=0.0.5, <=1.17.0)

jupyter-server PYPI version =0.0.5, =1.3.4, =0.18.3, =1.0.1, =0.0.0, =0.1.0rc1, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =1.2.13 and more Source cves: CVE-2022-29241 Source advisory: GHSA-Q874-G24W-4Q9G...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2022-29241 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2022-29241 Source advisory: OSV:GHSA-Q874-G24W-4Q9G...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2022-29241 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2022-29241 Source advisory: OSV:GHSA-Q874-G24W-4Q9G...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), appyter (>=0.18.3, <=0.18.11) +55 more potentially affected by CVE-2022-29241 via jupyter-server (>=1.0.11, <=1.17.0)

jupyter-server PYPI version =1.0.11, =1.3.4, =0.18.3, =1.0.1, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0, =0.0.3 and more Source cves: CVE-2022-29241 Source advisory: OSV:GHSA-Q874-G24W-4Q9G...

CVE-2022-29241

creationtimestamp| type| source ---|---|--- 2022-06-15 00:19:32+00:00| seen| https://t.me/cibsecurity/44470...

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2022-29241 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2022-29241 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2022-29241 Source advisory: OSV:PYSEC-2022-211...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2022-29241 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2022-29241 Source advisory:...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2022-29241 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2022-29241 Source advisory: OSV:PYSEC-2022-211...

CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29241 Known or guessable hidden files may be accessed in Jupyter Server

Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of rootdir that contains the starting user's home directory, then the underlying REST API ca...

CVE-2022-29241

CVE-2022-29241 affects Jupyter Server (backend for Jupyter web apps) prior to 1.17.1. If notebook_server is started with root_dir containing the starting user’s home directory, an authenticated user can leak the start-time access token via the REST API by guessing/brute-forcing the server PID. Th...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), appyter (>=0.18.3, <=0.18.11) +61 more potentially affected by CVE-2022-29241 via jupyter-server (>=0.0.5, <=1.17.0)

jupyter-server PYPI version =0.0.5, =1.3.4, =0.18.3, =1.0.1, =0.0.0, =0.1.0rc1, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =1.2.13 and more Source cves: CVE-2022-29241 Source advisory: MEND:CVE-2022-29241...