https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:15:54.845372+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-fdroidserver-cve-2015-6938 BREW-fdroidserver-CVE-2015-6938 — Improper Neutralization of Input During Web Page Generation in Jupyter Notebook 2026-10-03T12:15:54.851074+00:00

Affected: Homebrew: fdroidserver

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://cve.radiocsirt.org/vuln/cnvd-2015-06277 cnvd-2015-06277 2026-10-03T12:15:54.851120+00:00 cnvd-2015-06277 https://cve.radiocsirt.org/vuln/euvd-2026-94613 EUVD-2026-94613 2026-10-03T12:15:54.851138+00:00 EUVD-2026-94613 https://cve.radiocsirt.org/vuln/fkie_cve-2015-6938 fkie_cve-2015-6938 2026-10-03T12:15:54.851150+00:00

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://cve.radiocsirt.org/vuln/ghsa-4vwq-x64q-j4cj GHSA-4vwq-x64q-j4cj — Improper Neutralization of Input During Web Page Generation in Jupyter Notebook 2026-10-03T12:15:54.851172+00:00

Affected: PyPI: notebook, PyPI: ipython

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://cve.radiocsirt.org/vuln/gsd-2015-6938 gsd-2015-6938 2026-10-03T12:15:54.851193+00:00 gsd-2015-6938 https://cve.radiocsirt.org/vuln/pysec-2015-24 PYSEC-2015-24 2026-10-03T12:15:54.851204+00:00

Affected: PyPI: ipython

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-6938 Withdrawn: UBUNTU-CVE-2015-6938 2026-10-03T12:15:54.851234+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: ipython, Ubuntu:18.04:LTS: ipython

Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbitrary web script or HTML via a folder name. NOTE: this was originally reported as a cross-site request forgery (CSRF) vulnerability, but this may be inaccurate.