Login Request a demo
JU
Vendor
Jupyter
21 products with CVEs on record
82
CVEs
0
On KEV
1
New 30D
Products
NB
nbconvert
jupyter
8.8
5 CVEs0 on KEV1 new
NO
notebook
jupyter
9.6
18 CVEs0 on KEV0 new
JS
Jupyter Server
Jupyter
8.8
15 CVEs0 on KEV0 new
JU
Jupyterlab
Jupyter
9.8
8 CVEs0 on KEV0 new
JU
Jupyterhub
Jupyter
7.5
7 CVEs0 on KEV0 new
OA
Oauthenticator
Jupyter
9.1
5 CVEs0 on KEV0 new
EG
Enterprise Gateway
Jupyter
10.0
3 CVEs0 on KEV0 new
JU
jupyter/jupyter
jupyter
8.8
3 CVEs0 on KEV0 new
JS
Jupyter Server Proxy
Jupyter
9.8
3 CVEs0 on KEV0 new
JU
jupyter_core
jupyter
8.8
2 CVEs0 on KEV0 new
JU
Jupyterlab-git
Jupyter
9.0
2 CVEs0 on KEV0 new
LJ
Lti Jupyterhub Authenticator
Jupyter
9.8
2 CVEs0 on KEV0 new
BI
Binderhub
Jupyter
9.8
1 CVEs0 on KEV0 new
DO
Dockerspawner
Jupyter
4.3
1 CVEs0 on KEV0 new
EX
Extension-template
Jupyter
9.8
1 CVEs0 on KEV0 new
LS
Language Server Protocol Integration
Jupyter
9.8
1 CVEs0 on KEV0 new
NB
Nbdime
Jupyter
5.4
1 CVEs0 on KEV0 new
NB
Nbdime-jupyterlab
Jupyter
5.4
1 CVEs0 on KEV0 new
NB
nbgrader
jupyter
6.9
1 CVEs0 on KEV0 new
NB
nbviewer
jupyter
5.9
1 CVEs0 on KEV0 new
SC
Scheduler
Jupyter
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114140
NB
nbconvert
jupyter
8.8
0%
Oct 21nbconvert: File write via path traversal in cell output filenames
CVE-2026-86258
NB
nbviewer
jupyter
5.9
1%
Sep 6nbviewer through 1.0.1 Path Traversal via LocalFileHandler
CVE-2026-44182
EG
Enterprise Gateway
Jupyter
10.0
1%
Jul 16Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering
CVE-2026-44181
EG
Enterprise Gateway
Jupyter
10.0
1%
Jul 16Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution
CVE-2026-44180
EG
Enterprise Gateway
Jupyter
9.8
1%
Jul 16Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed
CVE-2026-54528
JU
Jupyterlab-git
Jupyter
7.1
0%
Jul 8jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
CVE-2026-54527
JU
Jupyterlab-git
Jupyter
9.0
1%
Jul 8JupyterLab Git: Stored XSS leading to RCE
CVE-2026-6658
JU
jupyter/jupyter
jupyter
5.4
0%
Jun 26Cross-site Scripting (XSS) in jupyter/nbconvert
CVE-2026-44727
JS
Jupyter Server
Jupyter
5.4
0%
Jun 22Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
CVE-2026-6657
JU
jupyter/jupyter
jupyter
8.8
6%
Jun 3CORS Origin Validation Bypass in jupyter-server
CVE-2026-5422
JU
jupyter/jupyter
jupyter
8.1
5%
Jun 2Path Traversal in jupyter/jupyter
CVE-2026-40864
JU
Jupyterhub
Jupyter
4.3
0%
May 22JupyterHub: Cross-origin form POSTs bypass XSRF
CVE-2026-42266
JU
Jupyterlab
Jupyter
8.8
6%
May 13JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
CVE-2026-42557
NO
notebook
jupyter
9.6
0%
May 13jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content
CVE-2026-40171
NO
notebook
jupyter
8.4
0%
May 6Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
CVE-2026-40934
JS
Jupyter Server
Jupyter
6.8
0%
May 5jupyter-server authentication cookies remain valid after password reset due to static cookie secret
CVE-2026-40110
JS
Jupyter Server
Jupyter
7.3
0%
May 5jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
CVE-2026-35397
JS
Jupyter Server
Jupyter
8.8
1%
May 5jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix
CVE-2025-61669
JS
Jupyter Server
Jupyter
6.1
0%
May 5jupyter_server next parameter open redirect can redirect users to external domains
CVE-2026-39378
NB
nbconvert
jupyter
6.5
0%
Apr 21nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
CVE-2026-39377
NB
nbconvert
jupyter
6.5
0%
Apr 21nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
CVE-2026-34052
LJ
Lti Jupyterhub Authenticator
Jupyter
5.9
0%
Apr 3LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)
CVE-2026-33709
JU
Jupyterhub
Jupyter
6.1
0%
Apr 3JupyterHub has an Open Redirect Vulnerability
CVE-2026-33175
OA
Oauthenticator
Jupyter
8.8
0%
Apr 3OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims
CVE-2025-53000
NB
nbconvert
jupyter
7.8
0%
Dec 17nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
CVE-2025-59842
JU
Jupyterlab
Jupyter
4.3
0%
Sep 26JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
CVE-2025-30167
JU
jupyter_core
jupyter
7.3
0%
Jun 3Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
CVE-2023-25574
LJ
Lti Jupyterhub Authenticator
Jupyter
9.8
0%
Feb 25JupyterHub's LTI13Authenticator: JWT signature not validated
CVE-2025-23205
NB
nbgrader
jupyter
6.9
0%
Jan 17`frame-ancestors: self` grants all users access to formgrader in nbgrader
CVE-2024-43805
JU
Jupyterlab
Jupyter
6.1
0%
Aug 28HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
CVE-2024-41942
JU
Jupyterhub
Jupyter
7.2
1%
Aug 8JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
CVE-2024-39700
JU
Jupyterlab
Jupyter
9.8
1%
Jul 16Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action
CVE-2024-35225
JS
Jupyter Server Proxy
Jupyter
6.1
0%
Jun 11Jupyter Server Proxy has a reflected XSS issue in host parameter
CVE-2024-35178
JS
Jupyter Server
Jupyter
7.5
1%
Jun 6Jupyter server on Windows discloses Windows user password hash
CVE-2024-28188
SC
Scheduler
Jupyter
5.3
0%
May 23jupyter-scheduler's endpoint is missing authentication
CVE-2024-28233
JU
Jupyterhub
Jupyter
6.1
0%
Mar 27XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing
CVE-2024-29033
OA
Oauthenticator
Jupyter
9.1
1%
Mar 20GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
CVE-2024-28179
JS
Jupyter Server Proxy
Jupyter
9.8
1%
Mar 20Jupyter Server Proxy's Websocket Proxying does not require authentication
CVE-2024-22420
JU
Jupyterlab
Jupyter
6.1
1%
Jan 19Stored cross site scripting in Markdown Preview in JupyterLab
CVE-2024-22421
JU
Jupyterlab
Jupyter
6.5
1%
Jan 19Potential authentication and CSRF tokens leak in JupyterLab
CVE-2024-22415
LS
Language Server Protocol Integration
Jupyter
9.8
0%
Jan 18Unsecured endpoints in the jupyter-lsp server extension
CVE-2023-48311
DO
Dockerspawner
Jupyter
4.3
1%
Dec 8dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers
CVE-2023-49080
JS
Jupyter Server
Jupyter
4.3
1%
Dec 4The Jupyter Server provides the backend (i.e
CVE-2023-40170
JS
Jupyter Server
Jupyter
6.1
1%
Aug 28jupyter-server is the backend for Jupyter web applications
CVE-2023-39968
JS
Jupyter Server
Jupyter
6.1
1%
Aug 28jupyter-server is the backend for Jupyter web applications
CVE-2022-39286
JU
jupyter_core
jupyter
8.8
1%
Oct 26Execution with Unnecessary Privileges in JupyterApp
CVE-2021-32862
NB
Nbconvert
Jupyter
5.4
1%
Aug 18The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert
CVE-2022-29241
JS
Jupyter Server
Jupyter
8.8
1%
Jun 14Jupyter Server provides the backend (i.e
CVE-2022-29238
NO
Notebook
Jupyter
4.3
1%
Jun 14Jupyter Notebook is a web-based notebook environment for interactive computing
CVE-2022-31027
OA
Oauthenticator
Jupyter
6.5
0%
Jun 9OAuthenticator is an OAuth token library for the JupyerHub login handler
CVE-2022-24758
NO
Notebook
Jupyter
7.5
1%
Mar 31The Jupyter notebook is a web-based notebook environment for interactive computing
CVE-2022-24757
JS
Jupyter Server
Jupyter
7.5
1%
Mar 23The Jupyter Server provides the backend (i.e
CVE-2022-21697
JS
Jupyter Server Proxy
Jupyter
7.1
1%
Jan 25Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services
CVE-2021-41247
JU
Jupyterhub
Jupyter
7.5
1%
Nov 4JupyterHub is an open source multi-user server for Jupyter notebooks
CVE-2021-41134
NB
Nbdime
Jupyter
5.4
1%
Nov 3nbdime provides tools for diffing and merging of Jupyter Notebooks
CVE-2021-39159
BI
Binderhub
Jupyter
9.8
2%
Aug 25BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories
CVE-2021-32798
NO
Notebook
Jupyter
9.6
2%
Aug 9The Jupyter notebook is a web-based notebook environment for interactive computing
CVE-2021-32797
JU
Jupyterlab
Jupyter
9.6
3%
Aug 9JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook
CVE-2020-36191
JU
Jupyterhub
Jupyter
4.5
1%
Jan 13JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account)
CVE-2020-26275
JS
Jupyter Server
Jupyter
6.1
1%
Dec 21The Jupyter Server provides the backend (i.e