jupyter/nbviewer

jupyter/nbviewer

GitHubGitHub
GitHubgithub.com
nbviewer.jupyter.orgnbviewer.jupyter.org
Releases2
Frequency
Last Release
Stars2.28K
nbconvert as a web service: Render Jupyter Notebooks as static web pages
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-32862↗
7.5 HIGH—

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).