Skip to content
OpenAdvisories

Package · PyPI

notebook

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2021-32798

    Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook

    The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can b…

    jupyter notebook notebook jupyter-notebook Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2015-7337

    Improper Input Validation in Jupyter Notebook

    The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.

    notebook ipython PyPI