CVE-2021-32797

[Catálogo de CVE]

This update for python-jupyterlab fixes the following issues: Update to 2.2.10: * Remove `form` tags' `action` attribute during sanitizing, to prevent an XSS (CVE-2021-32797) (boo#1196663) * Header ‘Content-Type’ should not be overwritten * Do not use token parameters in websocket urls * Properly handle errors in async browser_check * Cells can no longer be executed while kernels are terminating or restarting. There is a new status for these events on the Kernel Indicator * Add styling for high memory usage warning in status bar with nbresuse * Adds support for Python version 3.10 * Support live editing of SVG with updating rendering * Lazy load codemirror theme stylesheets * Add feature request template + slight reorg in readme * Add link to react example in extension-examples repo * Close correct tab with close tab * Remove unused css rules * Simplified multicursor backspace code * Fix recent breaking changes to normalizepath in filebrowser * Handle quit_button when launched as an extension * Add worker-loader * Fix icon sidebar height for third party extensions * Scrolls cells into view after deletion * Support Node.js 10+ * Select search text when focusing the search overlay * Throttle fetch requests in the setting registry’s data connector * Avoid redundant checkpoint calls on loading a notebook

Gravidade

Critical · CVSS 9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Published

Aug 9, 2021, 12:00:00 AM UTC

Updated

Feb 4, 2026, 2:13:41 AM UTC

Source

[NVD] · [CVE record]

EPSS

2.66% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "python-jupyterlab",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.10-bp154.2.3.1"
            }
          ]
        }
      ],
      "release": "package hub 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10075-1",
      "fixed_version": "2.2.10-bp154.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10075-1",
      "provider_updated_at": "2026-02-04T02:13:41.078627Z",
      "applicability_unknown": true
    },
    {
      "name": "python-jupyterlab",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.10-bp154.2.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2022:10075-1",
      "fixed_version": "2.2.10-bp154.2.3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2022:10075-1",
      "provider_updated_at": "2026-02-04T02:13:41.078627Z",
      "applicability_unknown": true
    }
  ]
}