Jupyter vulnerabilities

Products

• Notebook 25
• Server 15
• Jupyterlab 8
• Jupyterhub 7
• Nbconvert 5
• Oauthenticator 5
• Enterprise Gateway 3
• Jupyter/jupyter 3
• Server Proxy 3
• Core 2
• Jupyterlab-git 2
• Lti Jupyterhub Authenticator 2

Newest

• jupyter nbconvert nbconvert: File write via path traversal in cell output filenames CVE-2026-114140 Fix available 8.8 HighOctober 21, 2026
• jupyter notebook, jupyterlab, jupyterlab jupyterlite-core +2 more JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked CVE-2026-102832 Fix available 4.2 MediumOctober 13, 2026
• jupyter notebook, jupyterlab, jupyterlab jupyterlite-core +2 more JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard CVE-2026-102831 Fix available 8.1 HighSeptember 29, 2026
• jupyter nbviewer nbviewer through 1.0.1 Path Traversal via LocalFileHandler CVE-2026-86258 8.2 HighSeptember 6, 2026
• jupyter jupyter/jupyter Cross-site Scripting (XSS) in jupyter/nbconvert CVE-2026-6658 Fix available 5.4 MediumJune 26, 2026
• jupyter jupyterlab-git jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories CVE-2026-54528 Fix available 7.1 HighJune 19, 2026
• jupyter jupyterlab-git JupyterLab Git: Stored XSS leading to RCE CVE-2026-54527 Fix available 9.3 CriticalJune 19, 2026
• jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 more Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP CVE-2026-44727 Fix available 9.3 CriticalJune 18, 2026
• jupyter enterprise gateway Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering CVE-2026-44182 Fix available 10.0 CriticalJune 3, 2026
• jupyter enterprise gateway Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution CVE-2026-44181 Fix available 10.0 CriticalJune 3, 2026
• jupyter enterprise gateway Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed CVE-2026-44180 Fix available 9.8 CriticalJune 3, 2026
• jupyter server, jupyter/jupyter +1 more CORS Origin Validation Bypass in jupyter-server CVE-2026-6657 6.1 MediumJune 3, 2026
• jupyter jupyter/jupyter, server +1 more Path Traversal in jupyter/jupyter CVE-2026-5422 Fix available 6.8 MediumJune 2, 2026
• jupyter jupyterlab, notebook, red hat migration toolkit for applications 8.2 +2 more +4 more jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content CVE-2026-42557 Fix available 8.6 HighMay 6, 2026
• jupyter jupyterlab, red hat migration toolkit for applications 8.2, openshift ai (rhoai) +1 more +3 more JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. CVE-2026-42266 Fix available 8.8 HighMay 5, 2026
• jupyter jupyterhub JupyterHub: Cross-origin form POSTs bypass XSRF CVE-2026-40864 Public exploitFix available 5.4 MediumMay 5, 2026
• jupyter server, jupyter-server jupyter server +1 more jupyter-server authentication cookies remain valid after password reset due to static cookie secret CVE-2026-40934 Fix available 7.6 HighMay 5, 2026
• jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +1 more +3 more jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat CVE-2026-40110 Fix available 7.6 HighMay 5, 2026
• jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 more jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix CVE-2026-35397 Public exploitFix available 7.6 HighMay 5, 2026
• jupyter server, jupyter-server jupyter server +1 more jupyter_server next parameter open redirect can redirect users to external domains CVE-2025-61669 Fix available 6.3 MediumMay 5, 2026
• jupyter notebook, jupyter-notebook help-extension, jupyterlab +2 more Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker CVE-2026-40171 Fix available 8.4 HighApril 30, 2026
• jupyter nbconvert nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding CVE-2026-39378 Fix available 6.5 MediumApril 21, 2026
• jupyter nbconvert nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames CVE-2026-39377 Fix available 6.5 MediumApril 21, 2026
• jupyter lti jupyterhub authenticator, jupyterhub ltiauthenticator +1 more LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) CVE-2026-34052 Fix available 5.9 MediumApril 3, 2026
• jupyter jupyterhub JupyterHub has an Open Redirect Vulnerability CVE-2026-33709 Fix available 5.1 MediumApril 3, 2026
• jupyter oauthenticator OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims CVE-2026-33175 Fix available 8.8 HighApril 3, 2026
• jupyter nbconvert nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows CVE-2025-53000 Fix available 8.5 HighDecember 17, 2025
• jupyter jupyterlab JupyterLab LaTeX typesetter links did not enforce `noopener` attribute CVE-2025-59842 Fix available 2.1 LowSeptember 26, 2025
• jupyter core Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CVE-2025-30167 Fix available 7.3 HighJune 3, 2025
• jupyterhub ltiauthenticator, jupyter lti jupyterhub authenticator +1 more JupyterHub's LTI13Authenticator: JWT signature not validated CVE-2023-25574 Fix available 10.0 CriticalFebruary 25, 2025
• jupyter nbgrader `frame-ancestors: self` grants all users access to formgrader in nbgrader CVE-2025-23205 Fix available 6.9 MediumJanuary 17, 2025
• jupyter jupyterlab, notebook +1 more HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering CVE-2024-43805 Fix available 7.6 HighAugust 28, 2024
• jupyter jupyterhub JupyterHub has a privilege escalation vulnerability with the `admin:users` scope CVE-2024-41942 Fix available 7.2 HighAugust 8, 2024
• jupyter jupyterlab, extension-template +1 more Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action CVE-2024-39700 Public exploitFix available 10.0 CriticalJuly 16, 2024
• jupyter server proxy, jupyterhub jupyter-server-proxy, jupyter server proxy +2 more Jupyter Server Proxy has a reflected XSS issue in host parameter CVE-2024-35225 Fix available 9.7 CriticalJune 11, 2024
• jupyter server, jupyter-server jupyter server +1 more Jupyter server on Windows discloses Windows user password hash CVE-2024-35178 Fix available 7.5 HighJune 6, 2024
• jupyter scheduler, jupyter-server jupyter-scheduler +1 more jupyter-scheduler's endpoint is missing authentication CVE-2024-28188 Fix available 5.3 MediumMay 23, 2024
• jupyter jupyterhub XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing CVE-2024-28233 Fix available 8.1 HighMarch 27, 2024
• jupyter oauthenticator GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace CVE-2024-29033 Fix available 7.5 HighMarch 20, 2024
• jupyter server proxy, jupyterhub jupyter-server-proxy +1 more Jupyter Server Proxy's Websocket Proxying does not require authentication CVE-2024-28179 Fix available 9.1 CriticalMarch 20, 2024
• jupyter jupyterlab, notebook, fedoraproject fedora +2 more Potential authentication and CSRF tokens leak in JupyterLab CVE-2024-22421 Fix available 7.6 HighJanuary 19, 2024
• jupyter jupyterlab, notebook, fedoraproject fedora +2 more Stored cross site scripting in Markdown Preview in JupyterLab CVE-2024-22420 Fix available 6.5 MediumJanuary 19, 2024
• jupyter language server protocol integration, jupyter-lsp jupyterlab-lsp +1 more Unsecured endpoints in the jupyter-lsp server extension CVE-2024-22415 Fix available 7.3 HighJanuary 18, 2024
• jupyter dockerspawner Any image allowed by default CVE-2023-48311 Fix available 8.0 HighDecember 8, 2023
• jupyter server, jupyter-server jupyter server +1 more Jupyter Server errors include tracebacks with path information CVE-2023-49080 Fix available 3.5 LowDecember 4, 2023
• jupyter server, jupyter-server jupyter server +1 more Open Redirect Vulnerability in jupyter-server CVE-2023-39968 Fix available 4.3 MediumAugust 28, 2023
• jupyter server, jupyter-server jupyter server +1 more cross-site inclusion (XSSI) of files in jupyter-server CVE-2023-40170 Fix available 4.6 MediumAugust 28, 2023
• jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 more A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models... CVE-2022-3746 6.7 MediumAugust 23, 2023
• jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 more A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models... CVE-2022-3745 4.4 MediumAugust 23, 2023
• jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 more A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models... CVE-2022-3744 6.7 MediumAugust 23, 2023
• Show olderLoading…