Skip to contentJupyter vulnerabilities
Newest
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37434.4 Medium
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...CVE-2022-37426.7 Medium
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterAppCVE-2022-39286Fix available8.8 High
- jupyter nbconvert, debian linux +1 morenbconvert vulnerable to cross-site scripting (XSS) via multiple exploit pathsCVE-2021-32862Fix available7.5 High
- jupyter server, jupyter-server jupyter server +1 moreKnown or guessable hidden files may be accessed in Jupyter ServerCVE-2022-29241Fix available7.1 High
- jupyter notebookForced Browsing in Jupyter NotebookCVE-2022-29238Fix available4.3 Medium
- jupyter oauthenticatorAuthorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticatorCVE-2022-31027Fix available4.2 Medium
- jupyter notebookInsertion of Sensitive Information into Log File affects Jupyter NotebookCVE-2022-24758Fix available7.5 High
- jupyter server, jupyter-server jupyter server +1 moreSensitive Auth & Cookie data stored in Jupyter server logsCVE-2022-24757Fix available7.5 High
- jupyter server proxy, jupyterhub jupyter-server-proxy +1 moreSSRF vulnerability (requires authentication)CVE-2022-21697Fix available6.3 Medium
- jupyter jupyterhubincomplete logout in JupyterHubCVE-2021-41247Fix available3.5 Low
- jupyter nbdime, nbdime-jupyterlab +1 moreStored XSS in Jupyter nbdimeCVE-2021-41134Fix available8.7 High
- jupyter binderhubRemote code execution in BinderhubCVE-2021-39159Fix available9.6 Critical
- jupyter notebookFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebookCVE-2021-32798Fix available10.0 Critical
- jupyter jupyterlabJupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>CVE-2021-32797Fix available7.4 High
- jupyter jupyterhubCross-Site Request Forgery in JupyterHubCVE-2020-36191Fix available4.5 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect vulnerabilityCVE-2020-26275Fix available6.1 Medium
- jupyter oauthenticatorBase class whitelist configuration ignored in OAuthenticatorCVE-2020-26250Fix available6.3 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect in Jupyter ServerCVE-2020-26232Fix available4.1 Medium
- jupyter notebook, debian linux +1 moreOpen redirect in Jupyter NotebookCVE-2020-26215Fix available4.4 Medium
- jupyter notebookCross-site scripting in Jupyter NotebookCVE-2018-21030Fix available5.3 Medium
- jupyter notebookJupyter Notebook open redirect vulnerabilityCVE-2019-10856Fix available6.1 Medium
- jupyter jupyterhub, notebook +1 moreOpen Redirect vulnerability in jupyterhub and notebookCVE-2019-10255Fix available6.1 Medium
- jupyter notebookImproper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2019-9644Fix available5.4 Medium
- jupyter notebookJupyter Notebook XSS via directory nameCVE-2018-19352Fix available6.1 Medium
- jupyter notebookJupyter Notebook XSS via untrusted notebooksCVE-2018-19351Fix available6.1 Medium
- jupyter notebookJupyter Notebook file bypasses sanitization, executes JavaScriptCVE-2018-8768Fix available7.8 High
- jupyter oauthenticatorJupyterHub OAuthenticator elevation of privilegeCVE-2018-7206Fix available8.8 High
- ipython notebookImproper Input Validation in Jupyter NotebookCVE-2015-7337Fix available6.8 Medium
- ipython notebook, fedoraproject fedora, opensuse +2 moreImproper Neutralization of Input During Web Page Generation in Jupyter NotebookCVE-2015-6938Fix available4.3 Medium