Skip to content
OpenAdvisories

Package · PyPI

nbgrader

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-23205

    `frame-ancestors: self` grants all users access to formgrader in nbgrader

    nbgrader is a system for assigning and grading notebooks. Enabling frame-ancestors: 'self' grants any JupyterHub user the ability to extract formgrader content by sending malicious links to users with access to formgrader, at least when using the default Jupy…

    jupyter nbgrader nbgrader PyPI