Advisoriesby Ibis
Jupyter security advisories
62 advisories · 14 critical or high in 12 months · latest Oct 22
60 of 62 advisories
Jupyter: arbitrary file writeCVE-2026-114140fixed in 7.17.2Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationCVE-2026-114135fixed in 2.6.0JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCVE-2026-102832fixed in 4.5.11 +2JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)CVE-2026-102830fixed in 4.5.11 +1Jupyter: information disclosure in errorsCVE-2026-102904fixed in 4.5.11 +1JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardCVE-2026-102831fixed in 4.5.11 +2Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesCVE-2026-86049fixed in 2.21.0JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed LoginCVE-2026-54338fixed in 5.5.0Jupyter: code executionCVE-2026-6657no fix yetJupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)CVE-2026-73417fixed in 4.5.10 +1JupyterLab: Image viewer allows XSS when opening malicious image in new browser tabCVE-2026-73415fixed in 4.5.10 +1JupyterLab: PyPI extension blocklist package-name canonicalization bypassCVE-2026-73416fixed in 4.5.10 +1JupyterLab PluginManager lock-rule enforcement bypassCVE-2026-73627fixed in 4.5.10 +1Jupyter: improper access controlCVE-2026-73626fixed in 4.5.10 +1Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()CVE-2026-5422fixed in 2.18.2jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exportsCVE-2026-6658no fix yetJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolCVE-2026-67338fixed in 4.5.9Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPCVE-2026-44727fixed in 2.20.0JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted contentCVE-2026-42557fixed in 4.5.7 +1Jupyter: improper input validationCVE-2026-42266fixed in 4.5.7JupyterHub has cross-origin form POSTs bypass XSRF (CWE-352)CVE-2026-40864fixed in 5.4.5Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server RestartCVE-2026-40934fixed in 2.18.0Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`CVE-2026-40110fixed in 2.18.0Jupyter: path traversalCVE-2026-35397fixed in 2.18.0Jupyter Server has an open redirection vulnerability in `next` query parameterCVE-2025-61669fixed in 2.18.0Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSSCVE-2026-40171fixed in 4.5.7 +1nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image EmbeddingCVE-2026-39378fixed in 7.17.1nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment FilenamesCVE-2026-39377fixed in 7.17.1JupyterHub has an Open Redirect VulnerabilityCVE-2026-33709fixed in 5.4.4nbconvert has an uncontrolled search path that leads to unauthorized code execution on WindowsCVE-2025-53000fixed in 7.17.0JupyterLab LaTeX typesetter links did not enforce `noopener` attributeCVE-2025-59842fixed in 4.4.8HTML injection in Jupyter Notebook and JupyterLab leading to DOM ClobberingCVE-2024-43805fixed in 3.6.8 +2JupyterHub has a privilege escalation vulnerability with the `admin:users` scopeCVE-2024-41942fixed in 4.1.6 +1Jupyter: Repositories created using this template with `test` option includeCVE-2024-39700fixed in 4.3.0Jupyter server on Windows discloses Windows user password hashCVE-2024-35178fixed in 2.14.1Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie TossingCVE-2024-28233fixed in 4.1.0JupyterLab vulnerable to potential authentication and CSRF tokens leakCVE-2024-22421fixed in 3.6.7 +2JupyterLab vulnerable to SXSS in Markdown PreviewCVE-2024-22420fixed in 4.0.11 +1jupyter-server errors include tracebacks with path informationCVE-2023-49080fixed in 2.11.2Open Redirect Vulnerability in jupyter-serverCVE-2023-39968fixed in 2.7.2cross-site inclusion (XSSI) of files in jupyter-serverCVE-2023-40170fixed in 2.7.2nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit pathsCVE-2021-32862fixed in 6.5.1Jupyter server Token bruteforcingCVE-2022-29241fixed in 1.17.1 +1Token bruteforcingCVE-2022-29238fixed in 6.4.12Cross-Site Request Forgery in JupyterHubCVE-2020-36191fixed in 1.2.0b1Improper Input Validation in Jupyter NotebookCVE-2015-7337fixed in 4.0.5 +1Improper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2015-6938fixed in 4.0.5 +1Improper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2019-9644fixed in 5.7.6Sensitive Auth & Cookie data stored in Jupyter server logsCVE-2022-24758fixed in 6.4.10Insertion of Sensitive Information into Log File in Jupyter notebookCVE-2022-24757fixed in 1.15.4incomplete JupyterHub logout with simultaneous JupyterLab sessionsCVE-2021-41247fixed in 1.5.0Special Element Injection in notebookCVE-2021-32798fixed in 5.7.11 +1JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>CVE-2021-32797fixed in 1.2.21 +6Jupyter Server open redirect vulnerabilityCVE-2020-26275fixed in 1.1.1Open redirect in Jupyter ServerCVE-2020-26232fixed in 1.0.6Open redirect in Jupyter NotebookCVE-2020-26215fixed in 6.1.5Cross-site scripting in Jupyter NotebookCVE-2018-21030fixed in 5.5.0rc1Jupyter Notebook open redirect vulnerabilityCVE-2019-10856fixed in 5.7.8Open Redirect vulnerability in jupyterhub and notebookCVE-2019-10255fixed in 0.9.6 +1Jupyter Notebook XSS via directory nameCVE-2018-19352fixed in 5.7.2About Jupyter
Jupyter Server, Notebook, JupyterLab, nbconvert and JupyterHub.
Packages watched: jupyter-server (PyPI), notebook (PyPI), jupyterlab (PyPI), nbconvert (PyPI), jupyterhub (PyPI).