python-jupyter-server vulnerabilities (openSUSE)
11 vulnerabilities.
-
python-jupyter-serveropenSUSE Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP 9.3 Critical -
python-jupyter-serveropenSUSE Path Traversal in jupyter/jupyter 6.8 Medium -
python-jupyter-serveropenSUSE jupyter-server authentication cookies remain valid after password reset due to static cookie secret 7.6 High -
python-jupyter-serveropenSUSE jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat 7.6 High -
python-jupyter-serveropenSUSE jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix 7.6 High -
python-jupyter-serveropenSUSE jupyter_server next parameter open redirect can redirect users to external domains 6.3 Medium -
python-jupyter-serveropenSUSE Jupyter Server errors include tracebacks with path information 3.5 Low -
python-jupyter-serveropenSUSE Open Redirect Vulnerability in jupyter-server 4.3 Medium -
python-jupyter-serveropenSUSE cross-site inclusion (XSSI) of files in jupyter-server 4.6 Medium -
python-jupyter-serveropenSUSE Known or guessable hidden files may be accessed in Jupyter Server 7.1 High -
python-jupyter-serveropenSUSE Open redirect in Jupyter Server 4.1 Medium