Lucene search
+L

7 matches found

OSV
OSV
•added 2021/11/03 6:15 p.m.•31 views

CVE-2021-41134

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

5.4CVSS5.2AI score
SaveExploits0References2
PyPA
PyPA
•added 2021/11/03 6:15 p.m.•15 views

PYSEC-2021-428

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

8.7CVSS5.5AI score0.00703EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/11/03 6:15 p.m.•25 views

Cross site scripting

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

3.5CVSS5.2AI score0.00703EPSS
SaveExploits0References2Affected Software2
OSV
OSV
•added 2021/11/03 6:15 p.m.•37 views

PYSEC-2021-428

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

8.7CVSS0.9AI score0.00703EPSS
SaveExploits0References2
Mend
Mend
•added 2021/11/03 5:50 p.m.•7 views

CVE-2021-41134

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

9.3CVSS0.00703EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/03 12:00 a.m.•5 views

CVE-2021-41134: Improper Neutralization of Input During Web Page Generation

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

8.7CVSS5.5AI score0.00703EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/03 12:00 a.m.•3 views

PT-2021-23117

Name of the Vulnerable Software and Affected Versions nbdime versions prior to 1.1.1 nbdime versions prior to 2.1.1 nbdime versions prior to 3.1.1 nbdime versions prior to 5.0.2 nbdime versions prior to 6.1.2 nbdime-jupyterlab versions prior to 1.0.1 nbdime-jupyterlab versions prior to 2.1.1...

8.7CVSS0.00703EPSS
SaveExploits0References9
Rows per page
Query Builder