ALT-PU-2022-3366: package python3-module-nbconvert update to version 7.2.6-alt1
Описание
This update upgrades python3-module-nbconvert to version 7.2.6-alt1.
Устраненные уязвимости1
Связанные уязвимости
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
The GitHub Security Lab discovered sixteen ways to exploit a cross-sit ...
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths