jupyter notebook
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-42557 | >= 7.0.0, < 7.5.6 | jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content | HIGH 8.6 | 0.4 % | ||
| CVE-2026-40171 | >=7.0.0, <= 7.5.5 | Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker | HIGH 8.4 | 0.5 % | ||
| CVE-2022-29238 | < 6.4.12 | Forced Browsing in Jupyter Notebook | MEDIUM 4.3 | 1.1 % | ||
| CVE-2022-24758 | < 6.4.10 | Insertion of Sensitive Information into Log File affects Jupyter Notebook | HIGH 7.5 | 1.1 % | ||
| CVE-2021-32798 | >= 6.0.0, < 6.4.1 ; < 5.7.11 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook | CRITICAL 10.0 | 2.1 % | ||
| CVE-2020-26215 | < 6.1.5 | Open redirect in Jupyter Notebook | MEDIUM 6.1 | 1.2 % |