Open redirect in Jupyter Notebook
Priority LOW 30CWE-601Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-601.
Summary
Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.
Why it matters now
EPSS 0.01228 69th percentileScored 2026-11-07
Fix Fixed notebook (jupyter): 6.1.5notebook (PyPI): 6.1.5
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| jupyterlab | notebook | before 6.1.5 | 6.1.5 | Patch available | CNA |
| — | notebook (PyPI) | before 6.1.5 | 6.1.5 | Patch available | GHSA-c7vm-f5p4-8fqh |
- notebook Vendorjupyterlab Affected before 6.1.5 Fixed in 6.1.5 Patch available CNA
- notebook (PyPI) Vendor— Affected before 6.1.5 Fixed in 6.1.5 Patch available GHSA-c7vm-f5p4-8fqh
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:* | before 6.1.5 | Vulnerable | jupyterlab |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
- cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:* Versions before 6.1.5 Vulnerable ·jupyterlab
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
Remediation
- Fix · CNA notebook (jupyter) Fixed in 6.1.5
- Fix · GHSA-c7vm-f5p4-8fqh notebook (PyPI) Fixed in 6.1.5 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2020-26215
- 2026-10-03 Alias added: GHSA-c7vm-f5p4-8fqh
References
Advisory 3
More jupyterlab Notebook vulnerabilities
- TI-2021-12464 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook CVSS 3.1CRITICAL 10.0
- TI-2022-08572 Insertion of Sensitive Information into Log File affects Jupyter Notebook CVSS 3.1HIGH 7.5
- TI-2026-30837 jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content CVSS 4.0HIGH 8.6
- TI-2018-06323 In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass… CVSS 3.0HIGH 7.8
- TI-2015-06101 The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5… CVSS 2.0MEDIUM 6.8
- TI-2024-14994 Potential authentication and CSRF tokens leak in JupyterLab CVSS 3.1HIGH 7.6
Sources
- CVE-2020-26215 · CVE Program
- CVE-2020-26215 · NVD
- FIRST EPSS
- GHSA-c7vm-f5p4-8fqh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences