PYSEC-2021-428

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

PYSEC-2021-428

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

CVE-2021-41134

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

Cross site scripting

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

CVE-2021-41134 Stored XSS in Jupyter nbdime

nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting XSS issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs...

CVE-2021-41134

The CVE-2021-41134 issue affects the nbdime project (diffNotebookCheckpoint) used for diffing/merging Jupyter Notebooks. A stored XSS vulnerability arises when reading the local notebook name: the code appends .ipynb to the input name, builds the base string for the NbdimeWidget, and renders it i...

nbdime 跨站脚本漏洞

nbdime is the open source tool for differentiating and merging Jupyter notebooks. nbdime suffers from a cross-site scripting vulnerability that stems from the fact that when the software reads filenames and paths from disk, the extension does not effectively filter and escape the constructed stri...