jupyterlab vulnerabilities (Debian)
20 vulnerabilities.
-
jupyterlabDebian JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium -
jupyterlabDebian JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 6.8 Medium -
jupyterlabDebian JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 8.6 High -
jupyterlabDebian jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab 7.5 High -
jupyterlabDebian jupyterlab: PyPI extension blocklist package-name canonicalization bypass 6.1 Medium -
jupyterlabDebian JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass 6.0 Medium -
jupyterlabDebian JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager 7.7 High -
jupyterlabDebian JupyterLab before 4.5.9 Stored XSS via Extension Manager 5.1 Medium -
jupyterlabDebian systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name 7.8 High -
jupyterlabDebian jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content 8.6 High -
jupyterlabDebian JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 8.8 High -
jupyterlabDebian Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker 8.4 High -
jupyterlabDebian systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` 8.8 High -
jupyterlabDebian Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path 8.4 High -
jupyterlabDebian Command Injection in fsSize() on Windows 8.1 High -
jupyterlabDebian JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2.1 Low -
jupyterlabDebian Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation 7.8 High -
jupyterlabDebian HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 7.6 High -
jupyterlabDebian Potential authentication and CSRF tokens leak in JupyterLab 7.6 High -
jupyterlabDebian Stored cross site scripting in Markdown Preview in JupyterLab 6.5 Medium