Product by Jupyter
Jupyterlab
9 known vulnerabilities in Jupyterlab (Jupyter), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-42266 | Jupyterlab: Argument Injection | 8.8 | |
| Critical | CVE-2021-32797 | JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> | 7.4 | |
| Critical | CVE-2024-39700 | Jupyterlab Extension-template: Code Injection | 10.0 | |
| Critical | CVE-2026-42557 | Jupyterlab: Cross-site Scripting | 9.6 | |
| High | CVE-2026-40171 | Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker | — | |
| High | CVE-2024-22421 | Potential authentication and CSRF tokens leak in JupyterLab | 7.6 | |
| Medium | CVE-2024-22420 | Stored cross site scripting in Markdown Preview in JupyterLab | 6.5 | |
| High | CVE-2024-43805 | HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering | 7.6 | |
| Medium | CVE-2025-59842 | JupyterLab LaTeX typesetter links did not enforce `noopener` attribute | 4.3 |