keplergl / keplergl/kepler.gl

[Bug][Jupyter Widget] Security vulnerabilities in Ipywidgets

Open
#2,546 0 comments 1 reaction 1 assignee Claimed by @heshan0131 View on GitHub
jupyter
Dominant language
TypeScript
Stars
12k
Forks
2k
Avg merge
1d 5h
Merged PRs (30d)
66

Description

Security vulnerabilities in python dependency:

```
-> Vulnerability found in ipywidgets version 7.8.1
Vulnerability ID: 50664
Affected spec: <8.0.0
ADVISORY: Ipywidgets 8.0.0 sanitizes descriptions by default.https://github.com/jupyter-widgets/ipywidgets/pull/2785
PVE-2022-50664
For more information about this vulnerability, visit https://data.safetycli.com/v/50664/97c
To ignore this vulnerability, use PyUp vulnerability id 50664 in safety’s ignore command-line argument or add the ignore to your safety policy file.

-> Vulnerability found in ipywidgets version 7.8.1
Vulnerability ID: 50463
Affected spec: <8.0.0rc2
ADVISORY: Ipywidgets 8.0.0rc2 makes descriptions plaintext by default for security.https://github.com/jupyter-widgets/ipywidgets/pull/2785
PVE-2022-50463
For more information about this vulnerability, visit https://data.safetycli.com/v/50463/97c
To ignore this vulnerability, use PyUp vulnerability id 50463 in safety’s ignore command-line argument or add the ignore to your safety policy file.
```

https://pypi.org/project/ipywidgets/#history

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.