EUVD-2021-30547

Malicious code in bioql PyPI...

EUVD-2023-39395

Malicious code in bioql PyPI...

EUVD-2023-55999

Malicious code in bioql PyPI...

EUVD-2021-7849

Malicious code in bioql PyPI...

EUVD-2022-25162

Malicious code in bioql PyPI...

EUVD-2022-25164

Malicious code in bioql PyPI...

EUVD-2022-42806

Malicious code in bioql PyPI...

EUVD-2023-53921

Malicious code in bioql PyPI...

EUVD-2023-58185

Malicious code in bioql PyPI...

CVE-2025-10725: Incorrect Privilege Assignment

A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the...

Fedora 44 : jupyterlab / python-notebook (2025-2171590e11)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-2171590e11 advisory. New version of jupyterlab fixing CVE-2025-59842 and a new version of notebook. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 42 Update: jupyterlab-4.4.7-1.fc42

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

[SECURITY] Fedora 43 Update: jupyterlab-4.4.7-1.fc43

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

ROS-20250912-10

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

ROS-20250912-11

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

Linux Distros Unpatched Vulnerability : CVE-2022-2428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issu...

Linux Distros Unpatched Vulnerability : CVE-2021-39906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf...

Linux Distros Unpatched Vulnerability : CVE-2019-10856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255...

Malicious code in vscode-notebook-renderer (npm)

The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...

MAL-2025-38654 Malicious code in vscode-notebook-renderer (npm)

The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...