Jupyterlab vulnerabilities
We track 13 vulnerabilities in Jupyterlab products across 7 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
Latest Jupyterlab vulnerabilities
- 9.6 Critical severity
jupyterlab-desktop: URL Redirection to Untrusted Site
JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to the renderer without confirming that the current page still had the local Jupyter server origin. In a local managed sessi
- 9.4 Critical severity
jupyterlab-desktop: Improper Neutralization of Input During Web Page Generation
JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL ca
- 8.1 High severity
jupyterlab: Improper Neutralization of Input During Web Page Generation
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the syst
- 8.6 High severity
jupyterlab: Improper Neutralization of Input During Web Page Generation
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using
- 7.5 High severity
jupyterlab: Improper Access Control
JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never execute, so the extension allowlist/blocklist check was not enf
- 7.5 High severity
jupyterlab: Improper Neutralization of Input During Web Page Generation
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.10 and 4.6.2, in packages/imageviewer/src/widget.ts, JupyterLab's ImageViewer uses URL.createObjectURL for a specially
- 7.1 High severity
jupyterlab-git: Improper Handling of Case Sensitivity
JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() in GitHandler.prepare() in jupyterlab_git/handlers.py to enforce excluded_paths, allowing an authenticated user on a case-insensitive filesystem to var
- 9.0 Critical severity
jupyterlab-git: Improper Neutralization of Input During Web Page Generation
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScri
- 9.6 Critical severity
jupyterlab: Improper Neutralization of Input During Web Page Generation
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, wh
- 8.8 High severity
jupyterlab: Improper Neutralization of Argument Delimiters in a Command
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not
- 8.4 High severity
notebook: Improper Neutralization of Input During Web Page Generation
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help comm
- 7.4 High severity
jupyterlab-git: Improper Neutralization of Special Elements used in an OS Command
jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(<command>). These directory names are allowed in
- 9.8 Critical severity
extension-template: Improper Control of Generation of Code
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has an RCE vulnerability. Extension authors hosting their code on