CVE-2024-27133

Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields...

com.github.alexmojaki:s3-stream-upload (=1.0), com.hotels:circus-train-common-test (=10.0.0) +1 more potentially affected by CVE-2025-24961 via org.gaul:s3proxy (>=1.4.0 <=1.6.1)

org.gaul:s3proxy MAVEN version =1.4.0, =0.9.0-preview1, =0.9.0-preview2 Source cves: CVE-2025-24961 Source advisory: OSV:GHSA-2CCP-VQMV-4R4X...

CVE-2023-45908

Homarr before v0.14.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notebook widget...

PT-2025-1498 · Homarr · Homarr

Name of the Vulnerable Software and Affected Versions: Homarr versions prior to 0.14.0 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability can be exploited via the Notebook widget. Recommendations: For versions prior to 0.14.0, update to versio...

CVE-2023-45908

CVE-2023-45908 affects Homarr prior to v0.14.0, with a stored XSS vulnerability via the Notebook widget. The issue is described consistently across sources (NVD/Red Hat/CNNVD/OSV, etc.) as a stored XSS in the Notebook widget that could impact user-provided content; CVSS v3.1 base score 6.1 (Mediu...

homarr 跨站脚本漏洞

homarr is a customizable browser homepage by Thomas Camlong, an individual developer, that is used to interact with Docker containers on the main server. A security vulnerability exists in homarr versions prior to v0.14.0 that stems from the inclusion of a stored cross-site scripting XSS...

CVE-2023-45908

Homarr before v0.14.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notebook widget...

[SECURITY] Fedora 40 Update: jupyterlab-4.3.3-1.fc40

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

[SECURITY] Fedora 40 Update: jupyterlab-4.3.2-1.fc40

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

[SECURITY] Fedora 40 Update: python-notebook-7.3.1-1.fc40

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

[SECURITY] Fedora 41 Update: python-notebook-7.3.1-1.fc41

The Jupyter Notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. The Notebook has support for multiple programming languages, sharing, and interactive widgets...

Fedora 40 : jupyterlab / python-notebook (2024-c4377d35e6)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-c4377d35e6 advisory. New jupyterlab and notebook fixing security vulnerabilities. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 41 : jupyterlab / python-notebook (2024-d335b971e7)

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-d335b971e7 advisory. New jupyterlab and notebook fixing security vulnerabilities. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora: Security Advisory (FEDORA-2024-c4377d35e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

CVE-2024-53504 describes an SQL injection in Siyuan 3.1.11 exploitable via the notebook parameter in /searchHistory. The metric indicates a critical impact (CVSS v3.1: 9.8, High confidentiality, integrity, and availability impacts) with network attack vector and no privileges or user interaction ...

Fedora 41 : jupyterlab / python-notebook (2024-4b5f3d51ca)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-4b5f3d51ca advisory. Update jupyterlab and python-notebook to fix CVE-2024-43805. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 37 : python-notebook (2022-f9e459c893)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f9e459c893 advisory. Automatic update for python-notebook-6.4.11-3.fc37. Changelog Wed Jul 13 2022 Miro Hronok - 6.4.11-3 - Fix CVE-2022-24785 and CVE-2022-31129 in...