Vulnerabilities

TI-2026-86118 CVE-2026-102530

JupyterLab Desktop XSS on Connect URL Leads to Remote Code Execution

MEDIUM 41

JupyterLab Desktop is the cross-platform desktop application for JupyterLab.

CVSS 4.0CRITICAL 9.4 Network No auth User interaction EPSS 0.00417 Published 2026-11-06 Fixed in 4.6.2-1 CWE-116

TI-2025-44024 CVE-2025-55002

Privacy permission bypass in JupyterLab Desktop for macOS

LOW 24

JupyterLab Desktop is the cross-platform desktop application for JupyterLab.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00206 Published 2026-11-06 Fixed in 4.6.2-1 CWE-250

TI-2026-86116 CVE-2026-86044

JupyterLab Desktop token leak via crafted link enables remote code execution

MEDIUM 41

JupyterLab Desktop is the cross-platform desktop application for JupyterLab.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00313 Published 2026-11-06 Fixed in 4.6.2-1 CWE-601

TI-2025-44023 CVE-2025-54991

JupyterLab Desktop on macOS: TCC bypass via dyld entitlement

LOW 24

JupyterLab Desktop is the cross-platform desktop application for JupyterLab.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00192 Published 2026-11-06 Fixed in 4.6.2-1 CWE-250

TI-2026-78983 CVE-2026-114140 · GHSA-pjvx-prjx-h659

Path traversal in nbconvert lets crafted notebooks write files

HIGH 73

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00455 Published 2026-10-21 Partial fix · 7.17.2 CWE-22

TI-2026-78977 CVE-2026-114135 · GHSA-354v-3q48-cv69

Authorization bypass in Jupyter Server Gateway WebSocket handler

MEDIUM 41

Jupyter Server is the backend for Jupyter web applications.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00484 Published 2026-10-21 Partial fix · 2.6.0 CWE-862

TI-2026-71828 CVE-2026-102832 · GHSA-jwrc-gm9j-263p

Trust prompt in JupyterLab can mark the wrong document as trusted

LOW 19

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1MEDIUM 4.2 Network No auth User interaction EPSS 0.00143 Published 2026-10-13 Partial fix · 4.5.11, 4.6.4 +2 CWE-367

TI-2026-65533 CVE-2026-102904 · GHSA-3325-v43h-43rv

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

LOW 24

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00206 Published 2026-09-29 Partial fix · 4.5.11, 4.6.4 CWE-209

TI-2026-65520 CVE-2026-102831 · GHSA-6966-vjj6-99xv

JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

LOW 37

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00236 Published 2026-09-29 Partial fix · 4.5.11, 4.6.4 +2 CWE-345

TI-2026-65519 CVE-2026-102830 · GHSA-3jqq-pw4j-pqcj

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

LOW 32

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00261 Published 2026-09-29 Partial fix · 4.5.11, 4.6.4 +1 CWE-79

TI-2026-58868 CVE-2026-86049 · GHSA-c3mw-737p-c7g2

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

LOW 33

Jupyter Server is the backend for Jupyter web applications.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00416 Published 2026-09-17 Partial fix · 2.21.0 CWE-532

TI-2026-59044 CVE-2026-86258 · GHSA-v7gx-3h93-r9v6

nbviewer through 1.0.1 Path Traversal via LocalFileHandler

LOW 36

nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.can_show() that uses string-prefix comparison instead of proper path validation.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00522 Published 2026-09-06 No fix listed CWE-22

TI-2026-51535 CVE-2026-73417 · GHSA-pppj-hq3g-57pj

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

MEDIUM 41

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00748 Published 2026-08-13 Partial fix · 4.5.10, 4.6.2 CWE-116

TI-2026-51534 CVE-2026-73416 · GHSA-89vp-jrxv-24w8

jupyterlab: PyPI extension blocklist package-name canonicalization bypass

LOW 28

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 4.0MEDIUM 6.1 Network Low privileges No interaction EPSS 0.00664 Published 2026-08-13 Partial fix · 4.5.10, 4.6.2 CWE-178

TI-2026-51711 CVE-2026-73627 · GHSA-fpf6-h6p9-9rjr

JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass

LOW 27

JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00422 Published 2026-08-13 Partial fix CWE-602

TI-2026-51710 CVE-2026-73626 · GHSA-r336-hqvq-mfjh

JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager

LOW 34

JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install().

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00363 Published 2026-08-13 Partial fix · 4.6.1, 4.5.10 CWE-284

TI-2026-51533 CVE-2026-73415 · GHSA-gx64-gj6p-pc4c

jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab

LOW 36

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00737 Published 2026-08-12 Partial fix · 4.5.10, 4.6.2 CWE-79

TI-2026-47634 CVE-2026-67338 · GHSA-r75g-r7w6-363h

JupyterLab before 4.5.9 Stored XSS via Extension Manager

LOW 23

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2026-08-01 Partial fix · 4.5.9 CWE-84

TI-2026-32161 CVE-2026-44182 · GHSA-cfw7-6c5v-2wjq

Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering

HIGH 82

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00632 Published 2026-07-16 Fixed in 3.3.0 CWE-74

TI-2026-32160 CVE-2026-44181 · GHSA-f49j-v924-fx9w

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution

HIGH 82

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00767 Published 2026-07-16 Fixed in 3.3.0 CWE-1336

TI-2026-32159 CVE-2026-44180 · GHSA-chq7-94j8-cj28

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed

HIGH 82

Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00715 Published 2026-07-16 Fixed in 3.3.0 CWE-20

TI-2026-39373 CVE-2026-54528 · GHSA-436q-jwfr-rm2h

jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

MEDIUM 64

JupyterLab Git is a Git extension for JupyterLab.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00411 Published 2026-07-08 Partial fix · 0.54.0 CWE-178

TI-2026-39372 CVE-2026-54527 · GHSA-f962-v9hr-pfg5

JupyterLab Git: Stored XSS leading to RCE

HIGH 73

JupyterLab Git is a Git extension for JupyterLab.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00529 Published 2026-07-08 Partial fix · 0.54.0 CWE-79

TI-2026-05843 CVE-2026-6658 · GHSA-9754-6rhw-gj3h

Cross-site Scripting (XSS) in jupyter/nbconvert

MEDIUM 58

A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00161 Published 2026-06-26 Fix deferred CWE-79

TI-2026-32614 CVE-2026-44727 · GHSA-fcw5-x6j4-ccmp

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

MEDIUM 42

Jupyter Server is the backend for Jupyter web applications.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00438 Published 2026-06-22 Fixed in 2.20, 2.20.0 CWE-1021

Vulnerabilities

Filters