VIR Vulnerability Intelligence Relay

Package impact

python PyPI / jupyterlab

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2026-42266 high 8.8 8.8 23d ago JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed… debianpython
CVE-2026-42557 high — 8.0 15d ago JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content debianpython
CVE-2026-40171 high — 8.0 22d ago Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS debiannpmpython
CVE-2021-32797 high — 8.0 5y ago JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterL… archdebianpython
CVE-2025-59842 unknown — — 8mo ago JupyterLab LaTeX typesetter links did not enforce `noopener` attribute debianpython
CVE-2024-43805 unknown — — 2y ago HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering susedebianpython
CVE-2024-22421 unknown — — 2y ago JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Au… debianpython
CVE-2024-22420 unknown — — 2y ago JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicio… debianpython