Vulnerability	Vulnerable Version
M Access Restriction Bypass notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. Affected versions of this package are vulnerable to Access Restriction Bypass. When a fully authenticated request is sent to the notebook server which is configured with `ContentsManager.allow_hidden = False`, it is possible to access arbitrary hidden files or arbitrary files in hidden directories. How to fix Access Restriction Bypass? Upgrade `notebook` to version 6.4.12 or higher.	[,6.4.12)
H Information Exposure notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. Affected versions of this package are vulnerable to Information Exposure by storing sensitive authentication cookies and other header values whenever an HTTP 5XX error is triggered in the server logs by default. How to fix Information Exposure? Upgrade `notebook` to version 6.4.10 or higher.	[,6.4.10)
M Open Redirect notebook is a web application that allows you to create and share documents that contain live code, equations, visualizations, and explanatory text. Affected versions of this package are vulnerable to Open Redirect. It is possible to maliciously craft links can only be reasonably made for known notebook server hosts. This could be used to redirect to a spoofed server on the public internet. How to fix Open Redirect? Upgrade `notebook` to version 6.1.5 or higher.	[,6.1.5)

Go back to all versions of this package