Notebook

This hub aggregates every CVE we track for Notebook, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Notebook.

• CVE-2026-42557jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content9.6May 13, 2026
• CVE-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering7.6Aug 28, 2024
• CVE-2024-22420Stored cross site scripting in Markdown Preview in JupyterLab6.5Jan 19, 2024
• CVE-2024-22421Potential authentication and CSRF tokens leak in JupyterLab7.6Jan 19, 2024
• CVE-2022-3746A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormall...6.7Aug 23, 2023
• CVE-2022-3745A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI.4.4Aug 23, 2023
• CVE-2022-3744A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-code...6.7Aug 23, 2023
• CVE-2022-3743A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enu...4.4Aug 23, 2023
• CVE-2022-3742A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper b...6.7Aug 23, 2023
• CVE-2022-29238Forced Browsing in Jupyter Notebook4.3Jun 14, 2022
• CVE-2022-24758Insertion of Sensitive Information into Log File affects Jupyter Notebook7.5Mar 31, 2022
• CVE-2021-32798Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook10.0Aug 9, 2021
• CVE-2021-32797JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>7.4Aug 9, 2021
• CVE-2020-26215Open redirect in Jupyter Notebook4.4Nov 18, 2020
• CVE-2018-21030Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.5.3Oct 31, 2019