← All advisories

Moderate severityOSV Advisory· Published Apr 4, 2019· Updated Aug 4, 2024

CVE-2019-10856

CVE-2019-10856

Description

In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
notebookPyPI	< 5.7.8	5.7.8

Affected products

2

Jupyter/NotebookOSV
Range: 4.0.0, 4.0.1, 4.1.0, …
ghsa-coords
pkg:pypi/notebook
Range: < 5.7.8

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-rcx2-m7jp-p9wjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-10856ghsaADVISORY
blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4ghsax_refsource_MISCWEB
github.com/jupyter/notebook/commit/979e0bd15e794ceb00cc63737fcd5fd9addc4a99ghsaWEB
github.com/jupyter/notebook/compare/16cf97c...b8e30eaghsax_refsource_MISCWEB
github.com/pypa/advisory-database/tree/main/vulns/notebook/PYSEC-2019-158.yamlghsaWEB

News mentions

0

No linked articles in our index yet.