jupyterlab-desktop vulnerabilities

2 known vulnerabilities in jupyterlab-desktop from Jupyterlab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  jupyterlab-desktop: URL Redirection to Untrusted Site

  CVE-2026-86044Nov 6, 2026Jupyterlab

  JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to the renderer without confirming that the current page still had the local Jupyter server origin. In a local managed sessi

• 9.4 Critical severity

  jupyterlab-desktop: Improper Neutralization of Input During Web Page Generation

  CVE-2026-102530Nov 6, 2026Jupyterlab

  JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL ca