notebook vulnerabilities

UNKNOWN

npm

CVE-2026-40171

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

Apr 30, 2026

UNKNOWN

PyPI

CVE-2019-9644

Mar 12, 2019

CRITICAL 9.6

PyPI

CVE-2026-42557

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

May 6, 2026

HIGH 7.4

PyPI

CVE-2021-32797

JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Aug 23, 2021

CRITICAL 10.0

PyPI

CVE-2021-32798

Special Element Injection in notebook

Aug 23, 2021

MEDIUM 4.4

PyPI

CVE-2020-26215

Open redirect in Jupyter Notebook

Nov 18, 2020

UNKNOWN

PyPI

CVE-2022-29238

Jun 14, 2022

UNKNOWN

PyPI

CVE-2022-24758

Mar 31, 2022

UNKNOWN

PyPI

CVE-2020-26215

Nov 18, 2020

HIGH 7.8

PyPI

CVE-2018-8768

Jupyter Notebook file bypasses sanitization, executes JavaScript

Jul 12, 2018

MEDIUM 5.3

PyPI

CVE-2018-21030

Cross-site scripting in Jupyter Notebook

Nov 8, 2019

MEDIUM 6.1

PyPI

CVE-2018-19351

Jupyter Notebook XSS via untrusted notebooks

Nov 21, 2018

MEDIUM 6.1

PyPI

CVE-2018-19352

Jupyter Notebook XSS via directory name

Nov 21, 2018

MEDIUM 5.4

PyPI

CVE-2019-9644

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

May 14, 2022

MEDIUM 6.1

PyPI

CVE-2019-10856

Jupyter Notebook open redirect vulnerability

Apr 9, 2019

MEDIUM 6.1

PyPI

CVE-2015-6938

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

May 14, 2022

CRITICAL 9.8

PyPI

CVE-2015-7337

Improper Input Validation in Jupyter Notebook

May 17, 2022

HIGH 7.6

PyPI

CVE-2024-43805

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Aug 29, 2024

MEDIUM 6.5

PyPI

CVE-2024-22420

JupyterLab vulnerable to SXSS in Markdown Preview

Jan 19, 2024

HIGH 7.6

PyPI

CVE-2024-22421

JupyterLab vulnerable to potential authentication and CSRF tokens leak

Jan 19, 2024

MEDIUM 6.1

PyPI

CVE-2019-10255

Open Redirect vulnerability in jupyterhub and notebook

Apr 2, 2019

MEDIUM 4.3

PyPI

CVE-2022-29238

Token bruteforcing.

Jun 16, 2022

HIGH 7.5

PyPI

CVE-2022-24758

Sensitive Auth & Cookie data stored in Jupyter server logs

Apr 5, 2022

UNKNOWN

PyPI

CVE-2021-32798

Aug 9, 2021

UNKNOWN

PyPI

CVE-2019-10856

Apr 4, 2019

UNKNOWN

PyPI

CVE-2018-8768

Mar 18, 2018

UNKNOWN

PyPI

CVE-2018-21030

Oct 31, 2019

UNKNOWN

PyPI

CVE-2018-19352

Nov 18, 2018

UNKNOWN

PyPI

CVE-2018-19351

Nov 18, 2018

UNKNOWN

PyPI

CVE-2015-7337

Sep 29, 2015

UNKNOWN

PyPI

CVE-2015-6938

Sep 21, 2015

notebook

Vulnerabilities

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

CVE-2019-9644

JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content

JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Special Element Injection in notebook

Open redirect in Jupyter Notebook

CVE-2022-29238

CVE-2022-24758

CVE-2020-26215

Jupyter Notebook file bypasses sanitization, executes JavaScript

Cross-site scripting in Jupyter Notebook

Jupyter Notebook XSS via untrusted notebooks

Jupyter Notebook XSS via directory name

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

Jupyter Notebook open redirect vulnerability

Improper Neutralization of Input During Web Page Generation in Jupyter Notebook

Improper Input Validation in Jupyter Notebook

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

JupyterLab vulnerable to SXSS in Markdown Preview

JupyterLab vulnerable to potential authentication and CSRF tokens leak

Open Redirect vulnerability in jupyterhub and notebook

Token bruteforcing.

Sensitive Auth & Cookie data stored in Jupyter server logs

CVE-2021-32798

CVE-2019-10856

CVE-2018-8768

CVE-2018-21030

CVE-2018-19352

CVE-2018-19351

CVE-2015-7337

CVE-2015-6938

Start Securing