https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T23:49:39.521186+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2015-6938 CVE-2015-6938 2026-10-02T23:49:39.524001+00:00

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://vulnerability.circl.lu/vuln/ghsa-4vwq-x64q-j4cj GHSA-4vwq-x64q-j4cj — Improper Neutralization of Input During Web Page Generation in Jupyter Notebook 2026-10-02T23:49:39.524084+00:00

Affected: PyPI: notebook, PyPI: ipython

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://vulnerability.circl.lu/vuln/pysec-2015-24 PYSEC-2015-24 2026-10-02T23:49:39.524126+00:00

Affected: PyPI: ipython

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.