CVE-2023-49080

creationtimestamp| type| source ---|---|--- 2023-12-23 11:41:48+00:00| seen| https://t.me/ctinow/158781...

Fedora 39 : python-jupyter-server (2023-5beead493f)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5beead493f advisory. Security fix for CVE-2023-49080 rhbz2252897 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

lftakakura-mage-ai (0.9.37a1), mage-ai (>=0.7.88, <=0.9.74) potentially affected by CVE-2023-49080 via jupyter-server (1.23.5)

jupyter-server PYPI version 1.23.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - lftakakura-mage-ai 0.9.37a1 - mage-ai =0.7.88, =0.9.74 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

autopilotml (>=1.0.1, <=1.0.14), cadpr (>=0.1.0, <=0.1.1) +38 more potentially affected by CVE-2023-49080 via jupyter-server (>=2.0.0rc3, <=2.10.1)

jupyter-server PYPI version =2.0.0rc3, =1.0.1, =0.1.0, =0.0.1, =0.0.1, =0.2.0.dev0, =0.0.2, =0.1.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.1 and more Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2023-49080 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

xircuits (1.3.0) potentially affected by CVE-2023-49080 via jupyter-server (1.15.4)

jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2023-49080 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4), aepsych (>=0.3.0, <=0.4.0) +202 more potentially affected by CVE-2023-49080 via jupyter-server (1.24.0)

jupyter-server PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - acryl-datahub-gx-plugin =0.14.0.3rc1, =0.3.0, =0.1.0b0, =0.1.0, =0.2.2, =0.0.2, =0.0.2, =0.1.0, =0.2.0, =0.3.0 -...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2023-49080 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

immersim (1.0.3) potentially affected by CVE-2023-49080 via jupyter-server (1.23.1)

jupyter-server PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - immersim 1.0.3 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2023-49080 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2023-49080 Source advisory: OSV:GHSA-H56G-GQ9V-VC8R...

CVE-2023-49080 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2023-49080 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2023-49080 Source advisory:...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2023-49080 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

convert-and-download (0.3.0), nbinteract (>=0.0.18, <=0.1.8) +3 more potentially affected by CVE-2023-49080 via jupyter-server (1.13.2)

jupyter-server PYPI version 1.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - convert-and-download 0.3.0 - nbinteract =0.0.18, =0.0.2, =0.1.0, =4.3.2 Source cves: CVE-2023-49080 Source advisory:...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) +2 more potentially affected by CVE-2023-49080 via jupyter-server (1.18.1)

jupyter-server PYPI version 1.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

mplfooty (>=0.0.1, <=0.2.0), total-points-model (>=1.0.3, <=1.0.5) potentially affected by CVE-2023-49080 via jupyter-server (1.23.4)

jupyter-server PYPI version 1.23.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mplfooty =0.0.1, =1.0.3, =1.0.5 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

xircuits (1.3.0) potentially affected by CVE-2023-49080 via jupyter-server (1.15.4)

jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2023-49080 via jupyter-server (1.16.0)

jupyter-server PYPI version 1.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...

asiva (>=1.0.1, <=1.3.1), jupyterlab-daisy (>=1.0.6, <=1.0.9) potentially affected by CVE-2023-49080 via jupyter-server (1.8.0)

jupyter-server PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - asiva =1.0.1, =1.0.6, =1.0.9 Source cves: CVE-2023-49080 Source advisory: OSV:PYSEC-2023-272...