| JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCVE-2026-102832 · GHSA-JWRC-GM9J-263P |
jupyterlabjupyterlite-core |
PyPIRed Hat |
Medium
|
Fix reported |
|
| JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardCVE-2026-102831 · GHSA-6966-VJJ6-99XVVersion ranges need review. |
jupyterlabjupyterlite-core |
PyPIRed Hat |
High
|
Fix reported |
|
| JupyterLab vulnerable to SXSS in Markdown PreviewCVE-2024-22420 · GHSA-4M77-CMPX-VJC4Version ranges need review. |
jupyterlabnotebook |
PyPI |
Medium
|
Fix reported |
|
| Improper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2019-9644 · GHSA-HHX8-CR55-QCXXVersion ranges need review. |
jupyter-notebooknotebook |
PyPI |
Medium
|
Fix reported |
|
| HTML injection in Jupyter Notebook and JupyterLab leading to DOM ClobberingCVE-2024-43805 · GHSA-9Q39-RMJ3-P4R2Version ranges need review. |
jupyterlabnotebook |
PyPI |
High
|
Fix reported |
|
| JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted contentCVE-2026-42557 · GHSA-MQCG-5X36-VFCGVersion ranges need review. |
jupyterlabnotebook |
PyPIRed Hat |
High
|
Fix reported |
|
| Open Redirect vulnerability in jupyterhub and notebookCVE-2019-10255 · GHSA-RV62-4PMJ-XW6HVersion ranges need review. |
jupyterhubnotebook |
PyPI |
Medium
|
Fix reported |
|
| JupyterLab vulnerable to potential authentication and CSRF tokens leakCVE-2024-22421 · GHSA-44CC-43RP-5947Version ranges need review. |
jupyterlabnotebook |
PyPI |
High
|
Fix reported |
|
| Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSSCVE-2026-40171 · GHSA-RCH3-82JR-F9W9Version ranges need review. |
@jupyter-notebook/help-extension@jupyterlab/help-extension |
npmPyPI |
High
|
Fix reported |
|
| JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>CVE-2021-32797 · GHSA-4952-P58Q-6CRXVersion ranges need review. |
jupyterlabnotebook |
PyPI |
Medium
|
Fix reported |
|
| Token bruteforcing.CVE-2022-29238 · GHSA-V7VQ-3X77-87VGVersion ranges need review. |
notebook |
PyPI |
Medium
|
Fix reported |
|
| Sensitive Auth & Cookie data stored in Jupyter server logsCVE-2022-24758 · GHSA-M87F-39Q9-6F55Version ranges need review. |
notebook |
PyPI |
High
|
Fix reported |
|
| Open redirect in Jupyter NotebookCVE-2020-26215 · GHSA-C7VM-F5P4-8FQHVersion ranges need review. |
notebook |
PyPI |
Low
|
Fix reported |
|
| Jupyter Notebook file bypasses sanitization, executes JavaScriptCVE-2018-8768 · GHSA-6CWV-X26C-W2Q4Version ranges need review. |
notebook |
PyPI |
High
|
Fix reported |
|
| Cross-site scripting in Jupyter NotebookCVE-2018-21030 · GHSA-JQWC-JM56-WCWJVersion ranges need review. |
notebook |
PyPI |
Medium
|
Fix reported |
|
| Special Element Injection in notebookCVE-2021-32798 · GHSA-HWVQ-6GJX-J797Version ranges need review. |
notebook |
PyPI |
High
|
Fix reported |
|
| Jupyter Notebook XSS via untrusted notebooksCVE-2018-19351 · GHSA-49QR-XH3W-H436Version ranges need review. |
notebook |
PyPI |
Medium
|
Fix reported |
|
| Jupyter Notebook XSS via directory nameCVE-2018-19352 · GHSA-3P4Q-X8F3-P7VQVersion ranges need review. |
notebook |
PyPI |
Medium
|
Fix reported |
|
| Jupyter Notebook open redirect vulnerabilityCVE-2019-10856 · GHSA-RCX2-M7JP-P9WJVersion ranges need review. |
notebook |
PyPI |
Medium
|
Fix reported |
|
| Improper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2015-6938 · GHSA-4VWQ-X64Q-J4CJVersion ranges need review. |
ipythonnotebook |
PyPI |
Medium
|
Fix reported |
|
