jupyterlab

Records90All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

jupyterlab records in CISA KEV

No jupyterlab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Notebook 17 records MEDIUM Jupyter Server 15 records HIGH Jupyterlab 8 records HIGH Jupyterhub 7 records LOW Oauthenticator 5 records MEDIUM Nbconvert 4 records HIGH Enterprise Gateway 3 records HIGH Jupyter Server Proxy 3 records MEDIUM

Records

7 records in Jupyterhub · all components

TI-2024-18792 CVE-2024-28233 · GHSA-7r3h-4ph8-w38g

XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing

LOW 37

JupyterHub is an open source multi-user server for Jupyter notebooks.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00329 Published 2024-03-27 Fixed in 4.1.0 CWE-352

TI-2021-18082 CVE-2021-41247 · GHSA-cw7p-q79f-m2v7

incomplete logout in JupyterHub

LOW 34

JupyterHub is an open source multi-user server for Jupyter notebooks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00804 Published 2021-11-04 Fixed in 1.5.0 CWE-613

TI-2024-27964 CVE-2024-41942 · GHSA-9x4q-3gxw-849f

JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

LOW 32

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0059 Published 2024-08-08 Fixed in 4.1.6, 5.1.0 CWE-274

TI-2019-07569 CVE-2019-10255 · GHSA-rv62-4pmj-xw6h

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some…

LOW 31

An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious s…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01756 Published 2019-03-28 Fixed in 5.7.8, 0.9.6 CWE-601

TI-2026-29520 CVE-2026-40864 · GHSA-m68r-v472-jgq9

JupyterHub: Cross-origin form POSTs bypass XSRF

LOW 23

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00146 Published 2026-05-22 Fixed in 5.4.5 CWE-352

TI-2026-26088 CVE-2026-33709 · GHSA-3vff-hjqv-m7h8

JupyterHub has an Open Redirect Vulnerability

LOW 23

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00214 Published 2026-04-03 Fixed in 5.4.4 CWE-601

TI-2020-18511 CVE-2020-36191 · GHSA-7xx3-qp5w-fw96

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field…

LOW 21

JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.0051 Published 2021-01-13 Fixed in 1.2.0b1 CWE-352

Open these records in search →