MEDIUM6.1PyPI
GHSA-3p4q-x8f3-p7vq· CVE-2018-19352, PYSEC-2018-18Jupyter Notebook XSS via directory name
Modified: 9/27/2024
package
PyPI/notebook
pkg:pypi/notebook
HIGH7.6PyPI
GHSA-44cc-43rp-5947· BIT-jupyter-base-notebook-2024-22421, BIT-jupyter-notebook-2024-22421JupyterLab vulnerable to potential authentication and CSRF tokens leak
Modified: 9/10/2026
HIGH7.4PyPI
GHSA-4952-p58q-6crx· BIT-jupyterlab-2021-32797, CVE-2021-32797JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Modified: 7/8/2026
MEDIUM6.1PyPI
GHSA-49qr-xh3w-h436· CVE-2018-19351, PYSEC-2018-17Jupyter Notebook XSS via untrusted notebooks
Modified: 9/27/2024
MEDIUM6.5PyPI
GHSA-4m77-cmpx-vjc4· BIT-jupyter-base-notebook-2024-22420, BIT-jupyter-notebook-2024-22420JupyterLab vulnerable to SXSS in Markdown Preview
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-4vwq-x64q-j4cj· CVE-2015-6938, PYSEC-2015-24Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Modified: 9/23/2024
HIGH7.8PyPI
GHSA-6cwv-x26c-w2q4· CVE-2018-8768, PYSEC-2018-57Jupyter Notebook file bypasses sanitization, executes JavaScript
Modified: 12/7/2024
CRITICAL9.8PyPI
GHSA-92mr-v722-f48m· CVE-2015-7337, PYSEC-2015-25Improper Input Validation in Jupyter Notebook
Modified: 9/20/2024
HIGH7.6PyPI
GHSA-9q39-rmj3-p4r2· BIT-jupyter-base-notebook-2024-43805, BIT-jupyter-notebook-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
Modified: 7/13/2026
MEDIUM4.4PyPI
GHSA-c7vm-f5p4-8fqh· BIT-jupyter-base-notebook-2020-26215, BIT-jupyter-notebook-2020-26215Open redirect in Jupyter Notebook
Modified: 9/10/2026
MEDIUM5.4PyPI
GHSA-hhx8-cr55-qcxx· CVE-2019-9644, PYSEC-2019-159Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Modified: 7/13/2026
CRITICAL10.0PyPI
GHSA-hwvq-6gjx-j797· BIT-jupyter-base-notebook-2021-32798, BIT-jupyter-notebook-2021-32798Special Element Injection in notebook
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-jqwc-jm56-wcwj· CVE-2018-21030, PYSEC-2019-157Cross-site scripting in Jupyter Notebook
Modified: 10/7/2024
HIGH7.5PyPI
GHSA-m87f-39q9-6f55· BIT-jupyter-base-notebook-2022-24758, BIT-jupyter-notebook-2022-24758Sensitive Auth & Cookie data stored in Jupyter server logs
Modified: 12/6/2023
CRITICAL9.6PyPI
GHSA-mqcg-5x36-vfcg· BIT-jupyter-base-notebook-2026-42557, BIT-jupyter-notebook-2026-42557JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
Modified: 9/10/2026
HIGHnpmPyPI
GHSA-rch3-82jr-f9w9· BIT-jupyter-base-notebook-2026-40171, BIT-jupyter-notebook-2026-40171Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
Modified: 9/10/2026
MEDIUM6.1PyPI
GHSA-rcx2-m7jp-p9wj· CVE-2019-10856, PYSEC-2019-158Jupyter Notebook open redirect vulnerability
Modified: 9/26/2024
MEDIUM6.1PyPI
GHSA-rv62-4pmj-xw6h· CVE-2019-10255, PYSEC-2026-2683Open Redirect vulnerability in jupyterhub and notebook
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-v7vq-3x77-87vg· BIT-jupyter-base-notebook-2022-29238, BIT-jupyter-notebook-2022-29238Token bruteforcing.
Modified: 12/6/2023
—PyPI
PYSEC-2015-26· CVE-2015-6938, GHSA-4vwq-x64q-j4cjModified: 11/8/2023
—PyPI
PYSEC-2015-27· CVE-2015-7337, GHSA-92mr-v722-f48mModified: 11/8/2023
—PyPI
PYSEC-2018-17· CVE-2018-19351, GHSA-49qr-xh3w-h436Modified: 11/8/2023
—PyPI
PYSEC-2018-18· CVE-2018-19352, GHSA-3p4q-x8f3-p7vqModified: 11/8/2023
—PyPI
PYSEC-2018-57· CVE-2018-8768, GHSA-6cwv-x26c-w2q4Modified: 11/8/2023
—PyPI
PYSEC-2019-157· CVE-2018-21030, GHSA-jqwc-jm56-wcwjModified: 11/8/2023
—PyPI
PYSEC-2019-158· CVE-2019-10856, GHSA-rcx2-m7jp-p9wjModified: 11/8/2023
—PyPI
PYSEC-2019-159· CVE-2019-9644, GHSA-hhx8-cr55-qcxxModified: 7/13/2026
—PyPI
PYSEC-2020-215· BIT-jupyter-base-notebook-2020-26215, BIT-jupyter-notebook-2020-26215Modified: 10/9/2025
—PyPI
PYSEC-2021-118· BIT-jupyter-base-notebook-2021-32798, BIT-jupyter-notebook-2021-32798Modified: 12/6/2023
—PyPI
PYSEC-2022-180· BIT-jupyter-base-notebook-2022-24758, BIT-jupyter-notebook-2022-24758Modified: 10/9/2025
—PyPI
PYSEC-2022-212· BIT-jupyter-base-notebook-2022-29238, BIT-jupyter-notebook-2022-29238Modified: 10/9/2025
HIGH7.6PyPI
PYSEC-2026-1481· BIT-jupyter-base-notebook-2024-43805, BIT-jupyter-notebook-2024-43805HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
Modified: 7/13/2026
HIGH7.6PyPI
PYSEC-2026-1706· BIT-jupyter-base-notebook-2024-22421, BIT-jupyter-notebook-2024-22421JupyterLab vulnerable to potential authentication and CSRF tokens leak
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-1707· BIT-jupyter-base-notebook-2024-22420, BIT-jupyter-notebook-2024-22420JupyterLab vulnerable to SXSS in Markdown Preview
Modified: 7/13/2026
CRITICAL9.6PyPI
PYSEC-2026-2681· BIT-jupyter-base-notebook-2026-42557, BIT-jupyter-notebook-2026-42557JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
Modified: 7/13/2026
—PyPI
PYSEC-2026-2682· BIT-jupyter-base-notebook-2026-40171, BIT-jupyter-notebook-2026-40171Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2683· CVE-2019-10255, GHSA-rv62-4pmj-xw6hOpen Redirect vulnerability in jupyterhub and notebook
Modified: 7/13/2026
HIGH7.4PyPI
PYSEC-2026-688· BIT-jupyterlab-2021-32797, CVE-2021-32797JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Modified: 7/6/2026