python-jupyter-server vulnerabilities (openEuler)
6 vulnerabilities.
-
python-jupyter-serveropenEuler Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP 9.3 Critical -
python-jupyter-serveropenEuler jupyter-server authentication cookies remain valid after password reset due to static cookie secret 7.6 High -
python-jupyter-serveropenEuler jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat 7.6 High -
python-jupyter-serveropenEuler jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix 7.6 High -
python-jupyter-serveropenEuler jupyter_server next parameter open redirect can redirect users to external domains 6.3 Medium -
python-jupyter-serveropenEuler Jupyter server on Windows discloses Windows user password hash 7.5 High