jupyterlab vulnerabilities (PyPI)
19 vulnerabilities.
-
jupyterlabPyPI JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked 4.2 Medium -
jupyterlabPyPI JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs 5.4 Medium -
jupyterlabPyPI JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 8.1 High -
jupyterlabPyPI JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json) 6.8 Medium -
jupyterlabPyPI JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 8.6 High -
jupyterlabPyPI jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab 7.5 High -
jupyterlabPyPI jupyterlab: PyPI extension blocklist package-name canonicalization bypass 6.1 Medium -
jupyterlabPyPI JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass 6.0 Medium -
jupyterlabPyPI JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager 7.7 High -
jupyterlabPyPI JupyterLab before 4.5.9 Stored XSS via Extension Manager 5.1 Medium -
jupyterlabPyPI jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content 8.6 High -
jupyterlabPyPI JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 8.8 High -
jupyterlabPyPI Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker 8.4 High -
jupyterlabPyPI JupyterLab LaTeX typesetter links did not enforce `noopener` attribute 2.1 Low -
jupyterlabPyPI HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 7.6 High -
jupyterlabPyPI Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action 10.0 Critical -
jupyterlabPyPI Potential authentication and CSRF tokens leak in JupyterLab 7.6 High -
jupyterlabPyPI Stored cross site scripting in Markdown Preview in JupyterLab 6.5 Medium -
jupyterlabPyPI JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> 7.4 High