Skip to content
OpenAdvisories

Package · Alpine

jupyter-notebook

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.6
    CVE-2026-42557

    jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

    jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, w…

    jupyterlab jupyter jupyterlab notebook Debian Ubuntu Alpine PyPI
  • High 8.4
    CVE-2026-40171

    Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker

    In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help com…

    jupyterlab jupyter jupyter-notebook jupyterlab Debian Ubuntu Alpine Wolfi npm PyPI
  • Medium 4.3
    CVE-2022-29238

    Forced Browsing in Jupyter Notebook

    Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only prevented listing the contents of hidden directories, not a…

    jupyter notebook notebook jupyter-notebook Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2022-24758

    Insertion of Sensitive Information into Log File affects Jupyter Notebook

    The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are re…

    jupyter notebook notebook jupyter-notebook Debian Ubuntu Alpine PyPI