Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4112
  • PyPI/notebook
 JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 4 days ago
  • Fix available
  • Severity - 8.1 (High)
GHSA-6966-vjj6-99xv
  • PyPI/jupyterlab
  • PyPI/jupyterlite
  • PyPI/jupyterlite-core
  • PyPI/notebook
 JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard 4 days ago
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-2681
  • PyPI/notebook
 JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-2537
  • PyPI/jupyterlab
 JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content 13 Jul
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2026-2538
  • PyPI/jupyterlab
 Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS 13 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-2682
  • PyPI/notebook
 Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS 13 Jul
  • Fix available
  • Severity - 8.4 (High)
PYSEC-2026-2536
  • PyPI/jupyterlab
 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 13 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-2534
  • PyPI/jupyterlab
 JupyterLab vulnerable to potential authentication and CSRF tokens leak 13 Jul
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-2535
  • PyPI/jupyterlab
 JupyterLab vulnerable to SXSS in Markdown Preview 13 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2531
  • PyPI/jupyter-notebook
 Improper Neutralization of Input During Web Page Generation in Jupyter Notebook 09 Jul
  • Fix available
  • Severity - 5.1 (Medium)
PYSEC-2026-2683
  • PyPI/notebook
 Open Redirect vulnerability in jupyterhub and notebook 09 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-1481
  • PyPI/notebook
 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering 07 Jul
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-1706
  • PyPI/notebook
 JupyterLab vulnerable to potential authentication and CSRF tokens leak 07 Jul
  • Fix available
  • Severity - 7.6 (High)
PYSEC-2026-1707
  • PyPI/notebook
 JupyterLab vulnerable to SXSS in Markdown Preview 07 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-688
  • PyPI/notebook
 JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> 02 Jul
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-mqcg-5x36-vfcg
  • PyPI/jupyterlab
  • PyPI/notebook
 JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content 06 May
  • Fix available
  • Severity - 8.6 (High)
Load more...