jupyterlab vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20244
3. 20252
4. 202615

Newest CVEs

• CVE-2026-102832

  JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked

  jupyterlab · jupyterlab

  Medium4.2
• CVE-2026-102904

  JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

  jupyterlab · jupyterlab

  Medium5.4
• CVE-2026-102831

  JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard

  jupyterlab · jupyterlab

  High8.1
• CVE-2026-102830

  JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

  jupyterlab · jupyterlab

  Medium6.8
• CVE-2026-73417

  JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

  jupyterlab · jupyterlab

  High8.6
• CVE-2026-73416

  jupyterlab: PyPI extension blocklist package-name canonicalization bypass

  jupyterlab · jupyterlab

  Medium6.1
• CVE-2026-73627

  JupyterLab 4.6.0 Plugin Manager Lock-Rule Enforcement Bypass

  jupyterlab · jupyterlab

  Medium6.0
• CVE-2026-73626

  JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager

  jupyterlab · jupyterlab

  High7.7
• CVE-2026-73415

  jupyterlab: Image viewer in JupyterLab allows XSS when opening malicious image in new browser tab

  jupyterlab · jupyterlab

  High7.5
• CVE-2026-67338

  JupyterLab before 4.5.9 Stored XSS via Extension Manager

  jupyterlab · jupyterlab

  Medium5.1