Reflected cross-site scripting (XSS) In notebook
Description
Jupyter Notebook file bypasses sanitization, executes JavaScript In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 pypi | 5.4.1 | ||
 debian 13 | 5.4.1-1 | ||
debian 11 | 5.4.1-1 | ||
debian 12 | 5.1.0-2 | ||
debian 14 | 5.4.1-1 | ||
debian 11 | 5.1.0-2 | ||
debian 12 | 5.4.1-1 | ||
debian 13 | 5.1.0-2 | ||
debian 14 | 5.1.0-2 |
Aliases
1. 2. 3. 4. 5. 6. 7.
References
1. 2.