Known vulnerabilities in Jupyter Notebook

Vendor: Jupyter
Software CPE: cpe:2.3:a:jupyter:jupyter_notebook:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jupyter Notebook Jupyter Notebook is affected by 13 known vulnerabilities: 2 high, 2 medium, 9 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129538 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40171
CWE-79 Low
No
No
7.5.6 04.05.2026 SB2026042149
#VU97323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43805
CWE-79 Low
No
No
7.2.2 16.09.2024 SB2024091648
SB2024091649
SB2024091650
and 2 more
#VU66865 - Information Exposure Through Log Files
CVE-2022-24758
CWE-532 Low
No
No
6.4.10 30.08.2022 SB2022033123
SB2022083035
SB2022120724
#VU66864 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-10856
CWE-601 Low
No
No
5.7.8 30.08.2022 SB20190404112
SB2022083035
#VU66863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9644
CWE-79 Medium
No
No
5.7.6 30.08.2022 SB2019031212
SB2022083035
SB2019033104
and 1 more
#VU66862 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-10255
CWE-601 Low
No
No
5.7.7 30.08.2022 SB2019032836
SB2022083035
SB2019033104
and 1 more
#VU66861 - Security Features
CVE-2018-21030
CWE-254 Low
No
No
5.5.0 30.08.2022 SB2019103129
SB2022083035
#VU64595 - Direct Request ('Forced Browsing')
CVE-2022-29238
CWE-425 Low
No
No
6.4.12 22.06.2022 SB2022062232
SB2022083035
#VU56057 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-32798
CWE-94 High
No
No
5.7.11, 6.4.1 24.08.2021 SB2021082408
#VU48652 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-26215
CWE-601 Medium
No
No
6.1.5 18.11.2020 SB2020112507
SB2022083035
#VU15944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19352
CWE-79 Low
No
No
5.7.2 18.11.2018 SB2018111803
SB2018120704
SB2018112131
and 1 more
#VU15943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19351
CWE-79 Low
No
No
5.7.1 18.11.2018 SB2018111803
SB2018120704
SB2022083035
and 2 more
#VU12114 - Permissions, Privileges, and Access Controls
CVE-2018-8768
CWE-264 High
No
No
5.4.1 24.04.2018 SB2018042415
SB2018032112
SB2018032113
and 1 more