jupyterlab vulnerabilities (Bitnami)
16 vulnerabilities.
-
jupyterlabBitnami JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium -
jupyterlabBitnami JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 8.6 High -
jupyterlabBitnami jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab 7.5 High -
jupyterlabBitnami jupyterlab: PyPI extension blocklist package-name canonicalization bypass 6.1 Medium -
jupyterlabBitnami JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass 6.0 Medium -
jupyterlabBitnami JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager 7.7 High -
jupyterlabBitnami JupyterLab before 4.5.9 Stored XSS via Extension Manager 5.1 Medium -
jupyterlabBitnami jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content 8.6 High -
jupyterlabBitnami JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 8.8 High -
jupyterlabBitnami Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker 8.4 High -
jupyterlabBitnami JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2.1 Low -
jupyterlabBitnami HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 7.6 High -
jupyterlabBitnami Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action 10.0 Critical -
jupyterlabBitnami Potential authentication and CSRF tokens leak in JupyterLab 7.6 High -
jupyterlabBitnami Stored cross site scripting in Markdown Preview in JupyterLab 6.5 Medium -
jupyterlabBitnami JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> 7.4 High