Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:52:34 +0000 CVE-2018-8768 https://vulnerability.circl.lu/vuln/cve-2018-8768 <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> https://vulnerability.circl.lu/vuln/cve-2018-8768 GHSA-6cwv-x26c-w2q4 — Jupyter Notebook file bypasses sanitization, executes JavaScript https://vulnerability.circl.lu/vuln/ghsa-6cwv-x26c-w2q4 <p><strong>Affected:</strong> PyPI: notebook</p> <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> <p><strong>Affected:</strong> PyPI: notebook</p> <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> https://vulnerability.circl.lu/vuln/ghsa-6cwv-x26c-w2q4 PYSEC-2018-57 https://vulnerability.circl.lu/vuln/pysec-2018-57 <p><strong>Affected:</strong> PyPI: notebook</p> <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> <p><strong>Affected:</strong> PyPI: notebook</p> <p>In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is &#39;fixed&#39; by jQuery after sanitization, making it dangerous.</p> https://vulnerability.circl.lu/vuln/pysec-2018-57