Skip to content
OpenAdvisories

Package · Debian

jupyter-notebook

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-102831

    JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the sys…

    jupyterlab jupyterlab jupyterlite-core notebook Debian Ubuntu PyPI
  • High 8.4
    CVE-2026-40171

    Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker

    In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help com…

    jupyterlab jupyter jupyter-notebook jupyterlab Debian Ubuntu Alpine Wolfi npm PyPI
  • High 7.5
    CVE-2022-24758

    Insertion of Sensitive Information into Log File affects Jupyter Notebook

    The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are re…

    jupyter notebook notebook jupyter-notebook Debian Ubuntu Alpine PyPI
  • High 7.8
    CVE-2018-8768

    Jupyter Notebook file bypasses sanitization, executes JavaScript

    In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.

    notebook jupyter-notebook ipython ipython Debian Ubuntu PyPI