CVE-2015-6938

CVE-2015-6938 describes an XSS in the file browser of IPython Notebook/Jupyter Notebook. Affected products are IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5, where a folder name in the file browser notebook/notebookapp.py can be crafted to inject arbitrary web script or HT...

CVE-2015-7337

CVE-2015-7337 — IPython Notebook/Jupyter Notebook MIME-type handling flaw . The vulnerability affects IPython Notebook versions before 3.2.2 and Jupyter Notebook versions before 4.0.5, where a crafted file can trigger a redirect to files/ and cause remote JavaScript execution. Root cause: imprope...