python-jupyterlab vulnerabilities (openSUSE)
14 vulnerabilities.
-
python-jupyterlabopenSUSE JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium -
python-jupyterlabopenSUSE JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 8.1 High -
python-jupyterlabopenSUSE JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 6.8 Medium -
python-jupyterlabopenSUSE JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 8.6 High -
python-jupyterlabopenSUSE jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab 7.5 High -
python-jupyterlabopenSUSE jupyterlab: PyPI extension blocklist package-name canonicalization bypass 6.1 Medium -
python-jupyterlabopenSUSE JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass 6.0 Medium -
python-jupyterlabopenSUSE JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager 7.7 High -
python-jupyterlabopenSUSE jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content 8.6 High -
python-jupyterlabopenSUSE JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 8.8 High -
python-jupyterlabopenSUSE Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker 8.4 High -
python-jupyterlabopenSUSE JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2.1 Low -
python-jupyterlabopenSUSE HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 7.6 High -
python-jupyterlabopenSUSE JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> 7.4 High