Skip to content
OpenAdvisories

Package · PyPI

jupyterlite-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 4.2
    CVE-2026-102832

    JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to r…

    jupyterlab jupyterlab jupyterlite-core notebook Ubuntu PyPI
  • High 8.1
    CVE-2026-102831

    JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the sys…

    jupyterlab jupyterlab jupyterlite-core notebook Debian Ubuntu PyPI
  • Medium 6.8
    CVE-2026-102830

    JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

    JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected thir…

    jupyterlab jupyterlab jupyterlite-core jupyterlab Debian Ubuntu PyPI
  • High 8.1
    GHSA-gj55-2xf9-67rq

    HTML injection in JupyterLite leading to DOM Clobbering

    ### Impact The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data accessible from JupyterLite and perform arbitrary actions in …

    jupyterlite-core PyPI