myst-nb (0.8.5) potentially affected by CVE-2023-26302 via markdown-it-py (0.4.6)

markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26302 Source advisory: OSV:GHSA-JRWR-5X3P-HVC3...

myst-nb (0.8.5) potentially affected by CVE-2023-26303 via markdown-it-py (0.4.6)

markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26303 Source advisory: OSV:GHSA-VRJV-MXR7-VJF8...

myst-nb (0.8.5) potentially affected by CVE-2023-26303 via markdown-it-py (0.4.6)

markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26303 Source advisory: OSV:PYSEC-2023-24...

myst-nb (0.8.5) potentially affected by CVE-2023-26302 via markdown-it-py (0.4.6)

markdown-it-py PYPI version 0.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on markdown-it-py and may be impacted: - myst-nb 0.8.5 Source cves: CVE-2023-26302 Source advisory: OSV:PYSEC-2023-23...