jupyterlab

Top products

The 12 most recently published vulnerabilities affecting jupyterlab.

• CVE-2026-67338JupyterLab before 4.5.9 Stored XSS via Extension Manager6.1Aug 1, 2026
• CVE-2026-54528jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories7.1Jul 8, 2026
• CVE-2026-54527JupyterLab Git: Stored XSS leading to RCE9.0Jul 8, 2026
• CVE-2026-42266JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.8.8May 13, 2026
• CVE-2026-42557jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content9.6May 13, 2026
• CVE-2025-59842JupyterLab LaTeX typesetter links did not enforce `noopener` attribute4.3Sep 26, 2025
• CVE-2025-30370jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"7.4Apr 3, 2025
• CVE-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering7.6Aug 28, 2024
• CVE-2024-39700Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action9.9Jul 16, 2024
• CVE-2024-22420Stored cross site scripting in Markdown Preview in JupyterLab6.5Jan 19, 2024
• CVE-2024-22421Potential authentication and CSRF tokens leak in JupyterLab7.6Jan 19, 2024
• CVE-2021-32797JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>7.4Aug 9, 2021