jupyterlab vulnerabilities (Ubuntu)
19 vulnerabilities.
-
jupyterlabUbuntu JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked 4.2 Medium -
jupyterlabUbuntu JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium -
jupyterlabUbuntu JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 8.1 High -
jupyterlabUbuntu JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 6.8 Medium -
jupyterlabUbuntu JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 8.6 High -
jupyterlabUbuntu jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab 7.5 High -
jupyterlabUbuntu jupyterlab: PyPI extension blocklist package-name canonicalization bypass 6.1 Medium -
jupyterlabUbuntu JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass 6.0 Medium -
jupyterlabUbuntu JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager 7.7 High -
jupyterlabUbuntu JupyterLab before 4.5.9 Stored XSS via Extension Manager 5.1 Medium -
jupyterlabUbuntu systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name 7.8 High -
jupyterlabUbuntu jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content 8.6 High -
jupyterlabUbuntu JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 8.8 High -
jupyterlabUbuntu systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` 8.8 High -
jupyterlabUbuntu Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path 8.4 High -
jupyterlabUbuntu Command Injection in fsSize() on Windows 8.1 High -
jupyterlabUbuntu JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2.1 Low -
jupyterlabUbuntu Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation 7.8 High -
jupyterlabUbuntu HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 7.6 High