Skip to content
OpenAdvisories

Package · PyPI

ipython

8 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8

    Improper Input Validation in Jupyter Notebook

    The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

  • Critical 9.8

    IPython Notebook vulnerable to improper validation of the origin of websocket requests

    IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.