Skip to content
OpenAdvisories

Package · npm

nbdime

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    Stored XSS in Jupyter nbdime

    nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting (XSS) issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension doe…