NO
Product
notebook
18
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 11Low 0
Watch
Add notebook to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42557 | 9.6 | May 13 | jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content Affected: >= 7.0.0, < 7.5.6 |
| CVE-2021-32798 | 9.6 | Aug 9 | The Jupyter notebook is a web-based notebook environment for interactive computing Affected: 5.7.0 before 5.7.11; 6.4.0 |
| CVE-2026-40171 | 8.4 | May 6 | Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker Affected: >=7.0.0, <= 7.5.5 |
| CVE-2018-8768 | 7.8 | Mar 18 | In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context Affected: before 5.4.1 |
| CVE-2022-24758 | 7.5 | Mar 31 | The Jupyter notebook is a web-based notebook environment for interactive computing Affected: before 6.4.10 |
| CVE-2024-22421 | 6.5 | Jan 19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture Affected: 7.0.0 before 7.0.7 |
| CVE-2024-43805 | 6.1 | Aug 28 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture Affected: 7.0.0 before 7.2.2 |
| CVE-2024-22420 | 6.1 | Jan 19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture Affected: 7.0.0 before 7.0.7 |
| CVE-2020-26215 | 6.1 | Nov 18 | Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability Affected: before 6.1.5 |
| CVE-2019-10856 | 6.1 | Apr 4 | In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc Affected: before 5.7.8 |
| CVE-2019-10255 | 6.1 | Mar 28 | An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login… Affected: before 5.7.7 |
| CVE-2018-19352 | 6.1 | Nov 18 | Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely Affected: before 5.7.2 |
| CVE-2018-19351 | 6.1 | Nov 18 | Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server Affected: before 5.7.1 |
| CVE-2019-9644 | 5.4 | Mar 12 | An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a… Affected: before 5.7.6 |
| CVE-2018-21030 | 5.3 | Oct 31 | Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin Affected: before 5.5.0 |
| CVE-2022-29238 | 4.3 | Jun 14 | Jupyter Notebook is a web-based notebook environment for interactive computing Affected: before 6.4.12 |
| CVE-2015-7337 | – | Sep 29 | The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4 |
| CVE-2015-6938 | – | Sep 21 | Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4 |
Showing 18