Skip to contentJupyter Jupyterlab vulnerabilities
- jupyter jupyterlab-gitjupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded DirectoriesCVE-2026-54528Fix available7.1 High
- jupyter jupyterlab-gitJupyterLab Git: Stored XSS leading to RCECVE-2026-54527Fix available9.3 Critical
- jupyter jupyterlab, notebook, red hat migration toolkit for applications 8.2 +2 more +4 morejupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted contentCVE-2026-42557Fix available8.6 High
- jupyter jupyterlab, red hat migration toolkit for applications 8.2, openshift ai (rhoai) +1 more +3 moreJupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.CVE-2026-42266Fix available8.8 High
- jupyter jupyterlabJupyterLab LaTeX typesetter links did not enforce `noopener` attributeCVE-2025-59842Fix available2.1 Low
- jupyter jupyterlab, notebook +1 moreHTML injection in Jupyter Notebook and JupyterLab leading to DOM ClobberingCVE-2024-43805Fix available7.6 High
- jupyter jupyterlab, extension-template +1 moreRemote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub ActionCVE-2024-39700Public exploitFix available10.0 Critical
- jupyter jupyterlab, notebook, fedoraproject fedora +2 morePotential authentication and CSRF tokens leak in JupyterLabCVE-2024-22421Fix available7.6 High
- jupyter jupyterlab, notebook, fedoraproject fedora +2 moreStored cross site scripting in Markdown Preview in JupyterLabCVE-2024-22420Fix available6.5 Medium
- jupyter nbdime, nbdime-jupyterlab +1 moreStored XSS in Jupyter nbdimeCVE-2021-41134Fix available8.7 High
- jupyter jupyterlabJupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>CVE-2021-32797Fix available7.4 High