PYSEC-2018-57
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/notebook/PYSEC-2018-57.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2018-57
- Aliases
- Published
- 2018-03-18T06:29:00Z
- Modified
- 2023-11-01T05:19:19.086614Z
- Summary
- [none]
- Details
-
In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.
- References
Affected packages
PyPI / notebook
Package
- Name
- notebook
- View open source insights on deps.dev
- Purl
- pkg:pypi/notebook