jupyterlab

Records90All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical16CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

jupyterlab records in CISA KEV

No jupyterlab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Notebook 17 records MEDIUM Jupyter Server 15 records HIGH Jupyterlab 8 records HIGH Jupyterhub 7 records LOW Oauthenticator 5 records MEDIUM Nbconvert 4 records HIGH Enterprise Gateway 3 records HIGH Jupyter Server Proxy 3 records MEDIUM

Records

8 records in Jupyterlab · all components

TI-2024-26623 CVE-2024-39700

Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

HIGH 82

JupyterLab extension template is a `copier` template for JupyterLab extensions.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01092 Published 2024-07-16 Fixed in 4.3.3 CWE-94

TI-2026-30579 CVE-2026-42266 · GHSA-37w4-hwhx-4rc4

Improper input validation in jupyterlab

MEDIUM 49

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05652 Published 2026-05-13 Partial fix · 4.5.7 CWE-602

TI-2021-12463 CVE-2021-32797 · GHSA-4952-p58q-6crx

JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

MEDIUM 46

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0266 Published 2021-08-09 Fixed in 3.1.4, 3.0.17 +6 CWE-79

TI-2026-30837 CVE-2026-42557 · GHSA-mqcg-5x36-vfcg

jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

MEDIUM 40

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00486 Published 2026-05-13 Partial fix · 4.5.7, 7.5.6 CWE-79

TI-2024-14994 CVE-2024-22421 · GHSA-44cc-43rp-5947

Potential authentication and CSRF tokens leak in JupyterLab

LOW 34

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.0067 Published 2024-01-19 Fixed in 3.6.7, 4.0.11 +1 CWE-200

TI-2024-29399 CVE-2024-43805 · GHSA-9q39-rmj3-p4r2

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

LOW 33

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00399 Published 2024-08-28 Fixed in 3.6.8, 7.2.2 +1 CWE-79

TI-2024-14993 CVE-2024-22420 · GHSA-4m77-cmpx-vjc4

Stored cross site scripting in Markdown Preview in JupyterLab

LOW 30

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00573 Published 2024-01-19 Fixed in 4.0.11, 7.0.7 CWE-79

TI-2025-37281 CVE-2025-59842 · GHSA-vvfj-2jqx-52jm

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

LOW 11

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00252 Published 2025-09-26 Partial fix · 4.4.8 CWE-1022

Open these records in search →