Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 28
Filter zurücksetzenJupyterLab: PyPI extension blocklist package-name canonicalization bypass
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
JupyterLab vulnerable to potential authentication and CSRF tokens leak
Unsecured endpoints in the jupyter-lsp server extension
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories
Jupyter Server has an open redirection vulnerability in `next` query parameter
Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
Jupyter server on Windows discloses Windows user password hash
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
jupyter-server errors include tracebacks with path information
cross-site inclusion (XSSI) of files in jupyter-server
Open Redirect Vulnerability in jupyter-server
Jupyter server Token bruteforcing
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.