VYPR
← All advisories
Medium severity6.1OSV Advisory· Published Apr 4, 2019· Updated Jun 17, 2026

CVE-2019-10856

CVE-2019-10856

Description

In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
notebookPyPI
< 5.7.85.7.8

Affected products

3
  • Jupyter/NotebookOSV2 versions
    4.0.0, 4.0.1, 4.1.0, …+ 1 more
    • (no CPE)range: 4.0.0, 4.0.1, 4.1.0, …
    • cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:*range: <5.7.8
  • ghsa-coords
    pkg:pypi/notebook
    Range: < 5.7.8

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.