Lucene search
K

CVE-2026-40171

🗓️ 06 May 2026 19:36:32Reported by Alpine Linux Development TeamType 
alpinelinux
 alpinelinux
🔗 security.alpinelinux.org👁 6 Views

Stored cross-site scripting in Jupyter help linker enables token theft and full session takeover.

Related
Packages
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-40171
6 May 202619:36
attackerkb
Chainguard
CVE-2026-40171 vulnerabilities
1 May 202613:18
cgr
Circl
CVE-2026-40171
7 May 202601:37
circl
CNNVD
Jupyter多款产品 跨站脚本漏洞
6 May 202600:00
cnnvd
CVE
CVE-2026-40171
6 May 202619:36
cve
Cvelist
CVE-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
6 May 202619:36
cvelist
Debian CVE
CVE-2026-40171
6 May 202619:36
debiancve
Github Security Blog
Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
30 Apr 202617:25
github
NVD
CVE-2026-40171
6 May 202620:16
nvd
OPENSUSE Linux
Security update for python-jupyterlab (important)
13 May 202600:00
opensuse
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Alpine Linuxanyjupyter-notebook7.5.6-r0jupyter-notebook-7.5.6-r0.apk
Alpine Linux3.24anyjupyter-notebook7.5.6-r0jupyter-notebook-7.5.6-r0.apk

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 10:44Current
6Medium risk
Vulners AI Score6
CVSS 48.4
EPSS0.00476
SSVC
6