What’s Vulnerable › Vulnerabilities
CVE-2023-51277
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2024-01-05 · updated 2026-06-17
Description
nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds.
Affected products
- Tinowagner Jupyter Notebook Viewer: before 0.1.6 — fixed in 0.1.6
How to fix
Upgrade to a fixed version: Tinowagner Jupyter Notebook Viewer 0.1.6. Check the vendor advisory for mitigations.
References
- https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087731
- https://github.com/tuxu/nbviewer-app/commit/dc1e4ddf64c78e13175a39b076fa0646fc62e581
- https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6
- https://www.youtube.com/watch?v=c0nawqA_bdI
- https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/resolving_common_notarization_issues#3087731
- https://github.com/tuxu/nbviewer-app/commit/dc1e4ddf64c78e13175a39b076fa0646fc62e581
- https://github.com/tuxu/nbviewer-app/compare/0.1.5...0.1.6
- https://www.youtube.com/watch?v=c0nawqA_bdI
Get alerted when CVE-2023-51277 or the next vulnerability affects your stack