[ Vendor · 4 CVEs ]
jupyterlab
CVEs affecting jupyterlab published in the last 30 days, plus any jupyterlab CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102832 | 13 Oct 2026 | CVSS 4.2 | JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedJupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until… | Fix |
| CVE-2026-102904 | 29 Sep 2026 | CVSS 5.4 | JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLsJupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0… | Fix |
| CVE-2026-102830 | 29 Sep 2026 | CVSS 6.8 | JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0… | Fix |
| CVE-2026-102831 | 29 Sep 2026 | CVSS 8.1 | JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboardJupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0… | Fix |