Executive brief
In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.
Affected products
- PyPI notebook
Junglewise Threat Intelligence
CVE-2019-10856: PYSEC-2019-158 - In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-201
CVE-2019-10856 · Severity: low · CVSS 3 · Published 2019-04-04
Technologies: notebook (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2682 - Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
- PYSEC-2026-2536 - HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
- PYSEC-2026-2534 - JupyterLab vulnerable to potential authentication and CSRF tokens leak
- PYSEC-2026-2535 - JupyterLab vulnerable to SXSS in Markdown Preview
- PYSEC-2026-2531 - Improper Neutralization of Input During Web Page Generation in Jupyter Notebook