jupyter notebook vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Latest jupyter notebook vulnerabilities

CVE-2026-102832 — JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked (CVSS 4.2)
CVE-2026-102831 — JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard (CVSS 8.1)
CVE-2026-42557 — jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content (CVSS 9.6)
CVE-2026-40171 — Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker (CVSS 8.4)
CVE-2024-43805 — HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering (CVSS 6.1)
CVE-2024-22421 — Potential authentication and CSRF tokens leak in JupyterLab (CVSS 6.5)
CVE-2024-22420 — Stored cross site scripting in Markdown Preview in JupyterLab (CVSS 6.1)
CVE-2022-29238 — Forced Browsing in Jupyter Notebook (CVSS 4.3)
CVE-2022-24758 — Insertion of Sensitive Information into Log File affects Jupyter Notebook (CVSS 7.5)
CVE-2021-32798 — Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook (CVSS 9.6)
CVE-2020-26215 — Open redirect in Jupyter Notebook (CVSS 6.1)
CVE-2018-21030 — (CVSS 5.3)
CVE-2019-10856 — (CVSS 6.1)
CVE-2019-10255 — (CVSS 6.1)
CVE-2019-9644 — (CVSS 5.4)
CVE-2018-19352 — (CVSS 6.1)
CVE-2018-19351 — (CVSS 6.1)
CVE-2018-8768 — (CVSS 7.8)
CVE-2015-7337 — (CVSS 6.8)
CVE-2015-6938 — (CVSS 4.3)