Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

jupyterlab — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in jupyterlab, with AI-generated Chinese analysis, references, and POCs.

Vendor: jupyterlab

CVE IDTitleCVSSSeverityPublished
CVE-2026-42266 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. CWE-88 8.8 High2026-05-13
CVE-2026-42557 jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content CWE-79--2026-05-13
CVE-2025-59842 JupyterLab LaTeX typesetter links did not enforce `noopener` attribute CWE-1022 6.5 -2025-09-26
CVE-2024-43805 HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering CWE-79 7.6 High2024-08-28
CVE-2024-22420 Stored cross site scripting in Markdown Preview in JupyterLab CWE-79 6.5 Medium2024-01-19
CVE-2024-22421 Potential authentication and CSRF tokens leak in JupyterLab CWE-200 7.6 High2024-01-19
CVE-2021-32797 JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form> CWE-79 7.4 High2021-08-09

All 7 known CVE vulnerabilities affecting jupyterlab with full Chinese analysis, references, and POCs where available.