MEDIUM6.8PyPI
GHSA-3jqq-pw4j-pqcj· CVE-2026-102830, PYSEC-2026-4056JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
Modified: 10/1/2026
package
PyPI/jupyterlite-core
pkg:pypi/jupyterlite-core
HIGH8.1PyPI
GHSA-6966-vjj6-99xv· CVE-2026-102831, PYSEC-2026-4057JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
Modified: 10/1/2026
HIGH8.1PyPI
GHSA-gj55-2xf9-67rqHTML injection in JupyterLite leading to DOM Clobbering
Modified: 11/28/2024
MEDIUM4.2PyPI
GHSA-jwrc-gm9j-263p· CVE-2026-102832JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked
Modified: 10/15/2026
MEDIUM6.8PyPI
PYSEC-2026-4059· CVE-2026-102830, GHSA-3jqq-pw4j-pqcjJupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
Modified: 10/1/2026
HIGH8.1PyPI
PYSEC-2026-4060· CVE-2026-102831, GHSA-6966-vjj6-99xvJupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
Modified: 10/1/2026