Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/nbconvert@6.0.6
Typepypi
Namespace
Namenbconvert
Version6.0.6
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.3.0a0
Latest_non_vulnerable_version7.17.0
Affected_by_vulnerabilities
0
url VCID-qe9z-kwrs-3bgv
vulnerability_id VCID-qe9z-kwrs-3bgv
summary The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer).
references
0
reference_url https://github.com/jupyter/nbconvert/security/advisories/GHSA-9jmq-rx5f-8jwq
reference_id
reference_type
scores
url https://github.com/jupyter/nbconvert/security/advisories/GHSA-9jmq-rx5f-8jwq
1
reference_url https://github.com/jupyter/nbviewer/security/advisories/GHSA-h274-fcvj-h2wm
reference_id
reference_type
scores
url https://github.com/jupyter/nbviewer/security/advisories/GHSA-h274-fcvj-h2wm
fixed_packages
0
url pkg:pypi/nbconvert@6.3.0a0
purl pkg:pypi/nbconvert@6.3.0a0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/nbconvert@6.3.0a0
aliases CVE-2021-32862, GHSA-9jmq-rx5f-8jwq, GHSA-h274-fcvj-h2wm, PYSEC-2022-249
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qe9z-kwrs-3bgv
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/nbconvert@6.0.6