Login Request a demo
NO
Product
notebook
by jupyter · last CVE May 13, 2026
18
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 2High 3Medium 11Low 0
Severity
All severities18Critical2High3Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add notebook to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22421
6.5
1%
Jan 19
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture
Affected: 7.0.0 before 7.0.7
CVE-2024-43805
6.1
0%
Aug 28
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture
Affected: 7.0.0 before 7.2.2
CVE-2024-22420
6.1
1%
Jan 19
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture
Affected: 7.0.0 before 7.0.7
CVE-2020-26215
6.1
1%
Nov 18
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability
Affected: before 6.1.5
CVE-2019-10856
6.1
1%
Apr 4
In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc
Affected: before 5.7.8
CVE-2019-10255
6.1
2%
Mar 28
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login…
Affected: before 5.7.7
CVE-2018-19352
6.1
1%
Nov 18
Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely
Affected: before 5.7.2
CVE-2018-19351
6.1
2%
Nov 18
Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server
Affected: before 5.7.1
CVE-2019-9644
5.4
2%
Mar 12
An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a…
Affected: before 5.7.6
CVE-2018-21030
5.3
1%
Oct 31
Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin
Affected: before 5.5.0
CVE-2022-29238
4.3
1%
Jun 14
Jupyter Notebook is a web-based notebook environment for interactive computing
Affected: before 6.4.12
Showing 11