Jupyter

Jupyterlab

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-102904

  • EPSS 0.21%
  • Veröffentlicht 29.09.2026 20:47:43
  • Zuletzt bearbeitet 30.09.2026 21:17:06

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, ...

8.1

CVE-2026-102831

  • EPSS 0.2%
  • Veröffentlicht 29.09.2026 18:58:03
  • Zuletzt bearbeitet 02.10.2026 13:17:27

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4...

6.8

CVE-2026-102830

  • EPSS 0.26%
  • Veröffentlicht 29.09.2026 18:53:19
  • Zuletzt bearbeitet 29.09.2026 21:40:15

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a sele...

8.6

CVE-2026-73417

  • EPSS 0.55%
  • Veröffentlicht 13.08.2026 22:04:31
  • Zuletzt bearbeitet 18.09.2026 20:05:53

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json ...

6.1

CVE-2026-73416

  • EPSS 0.49%
  • Veröffentlicht 13.08.2026 22:04:26
  • Zuletzt bearbeitet 18.09.2026 20:05:53

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.0 until 4.5.10 and 4.6.2, in jupyterlab/extensions/manager.py and jupyterlab/extensions/pypi.py, JupyterLab's PyP...

7.5

CVE-2026-73626

  • EPSS 0.18%
  • Veröffentlicht 13.08.2026 11:28:25
  • Zuletzt bearbeitet 09.09.2026 20:36:38

JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check w...

7.5

CVE-2026-73415

  • EPSS 0.57%
  • Veröffentlicht 12.08.2026 19:54:00
  • Zuletzt bearbeitet 09.09.2026 20:58:37

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a ...

6.1

CVE-2026-67338

  • EPSS 0.18%
  • Veröffentlicht 01.08.2026 12:22:17
  • Zuletzt bearbeitet 08.10.2026 16:17:32

JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metada...

8.8

CVE-2026-42266

  • EPSS 0.55%
  • Veröffentlicht 13.05.2026 15:08:49
  • Zuletzt bearbeitet 28.08.2026 16:17:58

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_ur...

9.6

CVE-2026-42557

  • EPSS 0.35%
  • Veröffentlicht 13.05.2026 15:06:14
  • Zuletzt bearbeitet 28.08.2026 16:18:01

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button el...