jupyterlab vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-VMHF-C436-HXJ4Mediumjupyterlab: JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol CVE-2026-42557Highjupyterlab: JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content CVE-2026-42266Highjupyterlab: JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request CVE-2026-40171High@jupyter-notebook/help-extension: Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS CVE-2025-59842Lowjupyterlab: JupyterLab LaTeX typesetter links did not enforce `noopener` attribute CVE-2024-43805Highjupyterlab: HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering CVE-2024-22421Highjupyterlab: JupyterLab vulnerable to potential authentication and CSRF tokens leak CVE-2024-22420Mediumjupyterlab: JupyterLab vulnerable to SXSS in Markdown Preview CVE-2021-32797Mediumjupyterlab: JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo