JU
Product
Jupyterlab
by Jupyter · last CVE May 13, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 4Low 0
Watch

Add Jupyterlab to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-39700
9.8
1%
Jul 16
Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action
Affected: before 4.3.0
CVE-2026-42557
9.6
0%
May 13
jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
Affected: before 4.5.7
CVE-2021-32797
9.6
3%
Aug 9
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
Affected: before 1.2.21; 2.0.0 before 2.2.10; 2.3.0 before 2.3.2; 3.0.0 before 3.0.17; 3.1.0 before 3.1.4
Showing 3