Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-19352
4.3
MEDIUMCVSS v2
Published
November 18, 2018
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.
GitHub
notebookPython Package IndexJupyter Notebook - A web-based notebook environment for interactive computing
Python Package IndexJupyter Notebook - A web-based notebook environment for interactive computing< 5.7.2NVD