The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.
{
"availability": "No subscription required",
"binaries": [
{
"binary_name": "ipython",
"binary_version": "5.5.0-1"
},
{
"binary_name": "ipython3",
"binary_version": "5.5.0-1"
},
{
"binary_name": "python-ipython",
"binary_version": "5.5.0-1"
},
{
"binary_name": "python-ipython-doc",
"binary_version": "5.5.0-1"
},
{
"binary_name": "python3-ipython",
"binary_version": "5.5.0-1"
}
]
}