Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug][Jupyter Widget] Security vulnerabilities in Ipywidgets #2546

Open
dazza-codes opened this issue Mar 26, 2024 · 0 comments · May be fixed by #2545
Open

[Bug][Jupyter Widget] Security vulnerabilities in Ipywidgets #2546

dazza-codes opened this issue Mar 26, 2024 · 0 comments · May be fixed by #2545
Assignees
@heshan0131
Labels
jupyter keplergl for Jupyter

Comments

@dazza-codes
Copy link

Security vulnerabilities in python dependency:

-> Vulnerability found in ipywidgets version 7.8.1
   Vulnerability ID: 50664
   Affected spec: <8.0.0
   ADVISORY: Ipywidgets 8.0.0 sanitizes descriptions by default.https://github.com/jupyter-widgets/ipywidgets/pull/2785
   PVE-2022-50664
   For more information about this vulnerability, visit https://data.safetycli.com/v/50664/97c
   To ignore this vulnerability, use PyUp vulnerability id 50664 in safety’s ignore command-line argument or add the ignore to your safety policy file.


-> Vulnerability found in ipywidgets version 7.8.1
   Vulnerability ID: 50463
   Affected spec: <8.0.0rc2
   ADVISORY: Ipywidgets 8.0.0rc2 makes descriptions plaintext by default for security.https://github.com/jupyter-widgets/ipywidgets/pull/2785
   PVE-2022-50463
   For more information about this vulnerability, visit https://data.safetycli.com/v/50463/97c
   To ignore this vulnerability, use PyUp vulnerability id 50463 in safety’s ignore command-line argument or add the ignore to your safety policy file.

https://pypi.org/project/ipywidgets/#history
@dazza-codes dazza-codes added the jupyter keplergl for Jupyter label Mar 26, 2024
@dazza-codes dazza-codes linked a pull request Mar 26, 2024 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@heshan0131 heshan0131

Labels
jupyter keplergl for Jupyter
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update Ipywidgets>=8.x to fix security vulnerabilities dazza-codes/kepler.gl
2 participants
@dazza-codes @heshan0131