Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-21030
5.3
MEDIUMCVSS v3
Published
October 31, 2019
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.
GitHub