https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 00:04:12 +0000 https://db.gcve.eu/vuln/cve-2021-32862 <p><strong>Affected:</strong> jupyter nbconvert</p> <p>The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).</p> <p><strong>Affected:</strong> jupyter nbconvert</p> <p>The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).</p> https://db.gcve.eu/vuln/cve-2021-32862 https://db.gcve.eu/vuln/ghsa-9jmq-rx5f-8jwq <p><strong>Affected:</strong> PyPI: nbconvert</p> <p>Most of the fixes will be in this repo, though, so having it here gives us the private fork to work on patches</p> <p>Below is currently a duplicate of the original report:</p> <p>----</p> <p>Received on security@ipython.org unedited, I&#39;m not sure if we want to make it separate advisories.</p> <p>Pasted raw for now, feel free to edit or make separate advisories if you have the rights to.</p> <p>I think the most important is to switch back from nbviewer.jupyter.org -&gt; nbviewer.org at the cloudflare level I guess ? There might be fastly involved as well. --- ### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_</p> <p>### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_</p> <p>### References _Are there any links users can visit to find out more?_</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [example link to repo](http://example.com) * Email us at [example email address](mailto:example@example.com)</p> <p>---</p> <p># GitHub Security Lab (GHSL) Vulnerability Report</p> <p>The [GitHub Security Lab](https://securitylab.github.com) team has identified potential security vulnerabilities in [nbconvert](https://github.com/jupyter/nbconvert).</p> <p>We are committed to working with you to help resolve these issues. In this report you will find everything you need to effectively coordinate a resolution of these issues with the GHSL team.</p> <p>If at any p…</p> <p><strong>Affected:</strong> PyPI: nbconvert</p> <p>Most of the fixes will be in this repo, though, so having it here gives us the private fork to work on patches</p> <p>Below is currently a duplicate of the original report:</p> <p>----</p> <p>Received on security@ipython.org unedited, I&#39;m not sure if we want to make it separate advisories.</p> <p>Pasted raw for now, feel free to edit or make separate advisories if you have the rights to.</p> <p>I think the most important is to switch back from nbviewer.jupyter.org -&gt; nbviewer.org at the cloudflare level I guess ? There might be fastly involved as well. --- ### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>### Patches _Has the problem been patched? What versions should users upgrade to?_</p> <p>### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_</p> <p>### References _Are there any links users can visit to find out more?_</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [example link to repo](http://example.com) * Email us at [example email address](mailto:example@example.com)</p> <p>---</p> <p># GitHub Security Lab (GHSL) Vulnerability Report</p> <p>The [GitHub Security Lab](https://securitylab.github.com) team has identified potential security vulnerabilities in [nbconvert](https://github.com/jupyter/nbconvert).</p> <p>We are committed to working with you to help resolve these issues. In this report you will find everything you need to effectively coordinate a resolution of these issues with the GHSL team.</p> <p>If at any p…</p> https://db.gcve.eu/vuln/ghsa-9jmq-rx5f-8jwq https://db.gcve.eu/vuln/pysec-2022-249 <p><strong>Affected:</strong> PyPI: nbconvert</p> <p>The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).</p> <p><strong>Affected:</strong> PyPI: nbconvert</p> <p>The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).</p> https://db.gcve.eu/vuln/pysec-2022-249