jupyter / jupyter/security

Vulnerability issues

Open
#35 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Jupyter Notebook
Stars
27
Forks
12
Avg merge
3d 5h
Merged PRs (30d)
3

Description

Greetings, recently we ran a security check (Trivy) in our installed Jupyter image (`jupyterhub==1.5.0` )and spotted the following vulnerability issue, and looking over the discussion on #9 I thought it was worth mentioning those here:

CVE-2022-24785
High
Package: moment
Installed Version: 2.29.1
Vulnerability [CVE-2022-24785](https://avd.aquasec.com/nvd/cve-2022-24785)
Severity: HIGH
Fixed Version: 2.29.2
Link: CVE-2022-24785

maybe relevant https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4
found in `opt/conda/share/jupyterhub/static/components/moment/package.json:1
`
Thanks in advance.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.