Login Request a demo
JU
Vendor
Jupyter
18 products with CVEs on record
79
CVEs
0
On KEV
1
New 30D
Products
NB
nbconvert
jupyter
8.8
5 CVEs0 on KEV1 new
NO
notebook
jupyter
9.6
18 CVEs0 on KEV0 new
JS
Jupyter Server
Jupyter
8.8
15 CVEs0 on KEV0 new
JU
Jupyterlab
Jupyter
9.8
8 CVEs0 on KEV0 new
JU
Jupyterhub
Jupyter
7.5
7 CVEs0 on KEV0 new
OA
Oauthenticator
Jupyter
9.1
5 CVEs0 on KEV0 new
EG
Enterprise Gateway
Jupyter
10.0
3 CVEs0 on KEV0 new
JU
jupyter/jupyter
jupyter
8.8
3 CVEs0 on KEV0 new
JS
Jupyter Server Proxy
Jupyter
9.8
3 CVEs0 on KEV0 new
JU
jupyter_core
jupyter
8.8
2 CVEs0 on KEV0 new
JU
Jupyterlab-git
Jupyter
9.0
2 CVEs0 on KEV0 new
LJ
Lti Jupyterhub Authenticator
Jupyter
9.8
2 CVEs0 on KEV0 new
BI
Binderhub
Jupyter
9.8
1 CVEs0 on KEV0 new
DO
Dockerspawner
Jupyter
4.3
1 CVEs0 on KEV0 new
LS
Language Server Protocol Integration
Jupyter
9.8
1 CVEs0 on KEV0 new
NB
Nbdime
Jupyter
5.4
1 CVEs0 on KEV0 new
NB
Nbdime-jupyterlab
Jupyter
5.4
1 CVEs0 on KEV0 new
NB
nbviewer
jupyter
5.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114140
New
NB
nbconvert
jupyter
8.8
0%
Oct 21nbconvert: File write via path traversal in cell output filenames
CVE-2026-86258
NB
nbviewer
jupyter
5.9
1%
Sep 6nbviewer through 1.0.1 Path Traversal via LocalFileHandler
CVE-2026-44182
EG
Enterprise Gateway
Jupyter
10.0
1%
Jul 16Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering
CVE-2026-44181
EG
Enterprise Gateway
Jupyter
10.0
1%
Jul 16Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution
CVE-2026-44180
EG
Enterprise Gateway
Jupyter
9.8
1%
Jul 16Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed
CVE-2026-54528
JU
Jupyterlab-git
Jupyter
7.1
0%
Jul 8jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
CVE-2026-54527
JU
Jupyterlab-git
Jupyter
9.0
1%
Jul 8JupyterLab Git: Stored XSS leading to RCE
CVE-2026-6658
JU
jupyter/jupyter
jupyter
5.4
0%
Jun 26Cross-site Scripting (XSS) in jupyter/nbconvert
CVE-2026-44727
JS
Jupyter Server
Jupyter
5.4
0%
Jun 22Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
CVE-2026-6657
JU
jupyter/jupyter
jupyter
8.8
6%
Jun 3CORS Origin Validation Bypass in jupyter-server
CVE-2026-5422
JU
jupyter/jupyter
jupyter
8.1
5%
Jun 2Path Traversal in jupyter/jupyter
CVE-2026-40864
JU
Jupyterhub
Jupyter
4.3
0%
May 22JupyterHub: Cross-origin form POSTs bypass XSRF
CVE-2026-42266
JU
Jupyterlab
Jupyter
8.8
6%
May 13JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
CVE-2026-42557
NO
notebook
jupyter
9.6
0%
May 13jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
CVE-2026-40171
NO
notebook
jupyter
8.4
0%
May 6Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
CVE-2026-40934
JS
Jupyter Server
Jupyter
6.8
0%
May 5jupyter-server authentication cookies remain valid after password reset due to static cookie secret
CVE-2026-40110
JS
Jupyter Server
Jupyter
7.3
0%
May 5jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
CVE-2026-35397
JS
Jupyter Server
Jupyter
8.8
1%
May 5jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix
CVE-2025-61669
JS
Jupyter Server
Jupyter
6.1
0%
May 5jupyter_server next parameter open redirect can redirect users to external domains
CVE-2026-39378
NB
nbconvert
jupyter
6.5
0%
Apr 21nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
CVE-2026-39377
NB
nbconvert
jupyter
6.5
0%
Apr 21nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
CVE-2026-34052
LJ
Lti Jupyterhub Authenticator
Jupyter
5.9
0%
Apr 3LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)
CVE-2026-33709
JU
Jupyterhub
Jupyter
6.1
0%
Apr 3JupyterHub has an Open Redirect Vulnerability
CVE-2026-33175
OA
Oauthenticator
Jupyter
8.8
0%
Apr 3OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims
CVE-2025-53000
NB
Nbconvert
Jupyter
7.8
0%
Dec 17The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates
CVE-2025-59842
JU
Jupyterlab
Jupyter
4.3
0%
Sep 26jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture
CVE-2025-30167
JC
Jupyter Core
Jupyter
7.3
0%
Jun 3Jupyter Core is a package for the core common functionality of Jupyter projects
CVE-2023-25574
LJ
Lti Jupyterhub Authenticator
Jupyter
9.8
0%
Feb 25`jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI)
CVE-2024-43805
JU
Jupyterlab
Jupyter
6.1
0%
Aug 28jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture
CVE-2024-41942
JU
Jupyterhub
Jupyter
7.2
1%
Aug 8JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks
CVE-2024-39700
JU
Jupyterlab
Jupyter
9.8
1%
Jul 16JupyterLab extension template is a `copier` template for JupyterLab extensions
CVE-2024-35225
JS
Jupyter Server Proxy
Jupyter
6.1
0%
Jun 11Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them
CVE-2024-35178
JS
Jupyter Server
Jupyter
7.5
1%
Jun 6The Jupyter Server provides the backend for Jupyter web applications
CVE-2024-28233
JU
Jupyterhub
Jupyter
6.1
0%
Mar 27JupyterHub is an open source multi-user server for Jupyter notebooks
CVE-2024-29033
OA
Oauthenticator
Jupyter
9.1
1%
Mar 20OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider
CVE-2024-28179
JS
Jupyter Server Proxy
Jupyter
9.8
1%
Mar 20Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access
CVE-2024-22421
JU
Jupyterlab
Jupyter
6.5
1%
Jan 19JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture
CVE-2024-22420
JU
Jupyterlab
Jupyter
6.1
1%
Jan 19JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture
CVE-2024-22415
LS
Language Server Protocol Integration
Jupyter
9.8
0%
Jan 18jupyter-lsp is a coding assistance tool for JupyterLab (code navigation + hover suggestions + linters + autocompletion + rename) using Language Server Protocol
CVE-2023-48311
DO
Dockerspawner
Jupyter
4.3
1%
Dec 8dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers
CVE-2023-49080
JS
Jupyter Server
Jupyter
4.3
1%
Dec 4The Jupyter Server provides the backend (i.e
CVE-2023-40170
JS
Jupyter Server
Jupyter
6.1
1%
Aug 28jupyter-server is the backend for Jupyter web applications
CVE-2023-39968
JS
Jupyter Server
Jupyter
6.1
1%
Aug 28jupyter-server is the backend for Jupyter web applications
CVE-2022-39286
JU
jupyter_core
jupyter
8.8
1%
Oct 26Execution with Unnecessary Privileges in JupyterApp
CVE-2021-32862
NB
Nbconvert
Jupyter
5.4
1%
Aug 18The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert
CVE-2022-29241
JS
Jupyter Server
Jupyter
8.8
1%
Jun 14Jupyter Server provides the backend (i.e
CVE-2022-29238
NO
Notebook
Jupyter
4.3
1%
Jun 14Jupyter Notebook is a web-based notebook environment for interactive computing
CVE-2022-31027
OA
Oauthenticator
Jupyter
6.5
0%
Jun 9OAuthenticator is an OAuth token library for the JupyerHub login handler
CVE-2022-24758
NO
Notebook
Jupyter
7.5
1%
Mar 31The Jupyter notebook is a web-based notebook environment for interactive computing
CVE-2022-24757
JS
Jupyter Server
Jupyter
7.5
1%
Mar 23The Jupyter Server provides the backend (i.e
CVE-2022-21697
JS
Jupyter Server Proxy
Jupyter
7.1
1%
Jan 25Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services
CVE-2021-41247
JU
Jupyterhub
Jupyter
7.5
1%
Nov 4JupyterHub is an open source multi-user server for Jupyter notebooks
CVE-2021-41134
NB
Nbdime-jupyterlab
Jupyter
5.4
1%
Nov 3nbdime provides tools for diffing and merging of Jupyter Notebooks
CVE-2021-39159
BI
Binderhub
Jupyter
9.8
2%
Aug 25BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories
CVE-2021-32798
NO
Notebook
Jupyter
9.6
2%
Aug 9The Jupyter notebook is a web-based notebook environment for interactive computing
CVE-2021-32797
JU
Jupyterlab
Jupyter
9.6
3%
Aug 9JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook
CVE-2020-36191
JU
Jupyterhub
Jupyter
4.5
1%
Jan 13JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account)
CVE-2020-26275
JS
Jupyter Server
Jupyter
6.1
1%
Dec 21The Jupyter Server provides the backend (i.e
CVE-2020-26250
OA
Oauthenticator
Jupyter
6.3
1%
Dec 1OAuthenticator is an OAuth login mechanism for JupyterHub
CVE-2020-26232
JS
Jupyter Server
Jupyter
5.4
1%
Nov 24Jupyter Server before version 1.0.6 has an Open redirect vulnerability