Lucene search
+L

6 matches found

osv_bit
osv_bit
•added 2026/05/11 5:41 a.m.•27 views

BIT-JUPYTER-NOTEBOOK-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...

8.4CVSS7.2AI score0.00476EPSS
SaveExploits0References2
osv_bit
osv_bit
•added 2026/05/11 5:41 a.m.•28 views

BIT-JUPYTER-BASE-NOTEBOOK-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...

8.4CVSS7.2AI score0.00476EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/05/08 2:22 a.m.•20 views

SUSE CVE-2026-40171

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...

8.4CVSS7.2AI score0.00476EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/06 8:16 p.m.•56 views

CVE-2026-40171

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...

8.4CVSS0.00476EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/05/06 8:16 p.m.•19 views

CVE-2026-40171

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...

8.4CVSS7.3AI score0.00476EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/06 12:00 a.m.•40 views

Jupyter’s various products have cross-site scripting vulnerabilities

Jupyter Notebook is an open-source web application developed by Project Jupyter, designed for creating and sharing code along with explanatory text documents. JupyterLab is another open-source project developed by JupyterLab, offering an extensible environment for interactive and reproducible...

8.4CVSS7AI score0.00476EPSS
SaveExploits0References1
Rows per page
Query Builder