Uncontrolled external site redirect In jupyter-notebook
Description
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 6.1.5-1 | ||
debian 11 | 6.1.5-1 | ||
debian 12 | 6.1.5-1 | ||
debian 14 | 6.1.5-1 | ||
 pypi | 6.1.5 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8.
References
1. 2. 3.