Login Request a demo
JU
Product
Jupyterlab
by Jupyter · last CVE May 13, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 1Medium 4Low 0
Severity
All severities8Critical3High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jupyterlab to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39700
9.8
1%
Jul 16
Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action
Affected: before 4.3.0
CVE-2026-42557
9.6
0%
May 13
jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
Affected: before 4.5.7
CVE-2021-32797
9.6
3%
Aug 9
JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook
Affected: before 1.2.21; 2.0.0 before 2.2.10; 2.3.0 before 2.3.2; 3.0.0 before 3.0.17; 3.1.0 before 3.1.4
CVE-2026-42266
8.8
6%
May 13
JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
Affected: 4.0.0 before 4.5.7
CVE-2024-22421
6.5
1%
Jan 19
Potential authentication and CSRF tokens leak in JupyterLab
Affected: before 3.6.7; 4.0.0 before 4.0.11
CVE-2024-43805
6.1
0%
Aug 28
HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
Affected: before 3.6.8; 4.0.0 before 4.2.5
CVE-2024-22420
6.1
1%
Jan 19
Stored cross site scripting in Markdown Preview in JupyterLab
Affected: 4.0.0 before 4.0.11
CVE-2025-59842
4.3
0%
Sep 26
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
Affected: before 4.4.8
Showing 8