CVE-2024-37890

Advisory

Itables 2.1.2 updates its node_modules/ws dependency from version 7.5.9 to 7.5.10 to address security concerns, including CVE-2024-37890.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

**Changed**
- The default CSS contains now has `overflow:auto` on `div.dt-layout-table>div`. Thanks to this we now get an automatic horizontal scrolling in Jupyter, Jupyter Book and also Streamlit if the table is too wide ([282](https://github.com/mwouts/itables/pull/282)).

**Fixed**
- The dependencies of the streamlit components have been updated to fix a vulnerability in `ws` ([Alert 1](https://github.com/mwouts/itables/security/dependabot/1))

Resources

• https://github.com/mwouts/itables/commit/d92fbab7620817e072ec43ebf3ca5390381ceca8#diff-a0359ee780c9e0dcddb0ccf27d49d49639d94e005acdcc45e783bd25ec492c6e
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37890