TI-2026-28985 CVE-2026-40171 · GHSA-rch3-82jr-f9w9
Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
Priority LOW 39
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cro…