{"kind": "product", "path": "vulns/pypi/notebook", "name": "notebook", "product": "notebook", "ecosystem": "PyPI", "items": [{"id": "CVE-2026-102832", "noindex": false, "published": "2026-10-13T15:19:40.699Z", "modified": "2026-10-13T16:09:02.990Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00143, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-102832", "title": "JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked", "description": "JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewer:trust and notebook:trust command-link handlers use tracker.currentWidget to resolve the current Markdown viewer or notebook when the user answers rather than retaining the document whose command button was clicked. If another document becomes current while the prompt is open and the user chooses Trust, JupyterLab marks the second document trusted while leaving the clicked document untrusted. Later command buttons in the incorrectly trusted document run without a p", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-jwrc-gm9j-263p", "https://github.com/jupyterlab/jupyterlab/commit/0fc18ab4ef67e431a8f6560e387193baf786c70a", "https://github.com/jupyterlab/jupyterlab/commit/b64bc88b8ca034cf158604a5cc48ca9170ea453b"], "fixes": ["7.6.3"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-102831", "noindex": false, "published": "2026-09-29T18:58:03.634Z", "modified": "2026-10-02T12:22:58.664Z", "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "severity": "high", "epss": 0.00193, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-102831", "title": "JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard", "description": "JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affe", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-6966-vjj6-99xv", "https://github.com/jupyterlab/jupyterlab/commit/1a10a7da5ff655849b21581c2633b46483ae0be9", "https://github.com/jupyterlab/jupyterlab/commit/7f9f29e29e0c83fb17b0f11da57d06b3c6a40d96"], "fixes": ["7.6.3"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-42557", "noindex": false, "published": "2026-05-13T15:06:14.222Z", "modified": "2026-08-28T12:04:30.875Z", "cvss": 8.6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00371, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-42557", "title": "jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content", "description": "jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for executio", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg", "https://access.redhat.com/security/cve/CVE-2026-42557", "https://bugzilla.redhat.com/show_bug.cgi?id=2477086"], "fixes": ["7.5.6"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-40171", "noindex": false, "published": "2026-05-06T19:36:32.072Z", "modified": "2026-05-08T03:55:41.465Z", "cvss": 8.4, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00476, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-40171", "title": "Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker", "description": "In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click.\n\nAn attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeov", "references": ["https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9", "https://nvd.nist.gov/vuln/detail/CVE-2026-40171"], "fixes": ["7.5.6"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-43805", "noindex": false, "published": "2024-08-28T19:43:20.007Z", "modified": "2024-08-28T19:58:57.799Z", "cvss": 7.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L", "severity": "high", "epss": 0.00399, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-43805", "title": "HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering", "description": "jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. This vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab v3.6.8, v4.2.5 and Jupyter Notebook v7.2.2 have been patched to resolve this issue. Users are advised to upgrade. There is no workaround for the underlying DOM Clobbering susceptibility. However, select plugins can be d", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-9q39-rmj3-p4r2", "https://nvd.nist.gov/vuln/detail/CVE-2024-43805"], "fixes": ["7.2.2"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-22420", "noindex": false, "published": "2024-01-19T20:49:09.933Z", "modified": "2025-05-30T14:25:05.056Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00573, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-22420", "title": "Stored cross site scripting in Markdown Preview in JupyterLab", "description": "JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension.", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4m77-cmpx-vjc4", "https://github.com/jupyterlab/jupyterlab/commit/e1b3aabab603878e46add445a3114e838411d2df", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"], "fixes": ["7.0.7"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-22421", "noindex": false, "published": "2024-01-19T20:45:49.027Z", "modified": "2025-06-17T21:19:25.169Z", "cvss": 7.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L", "severity": "high", "epss": 0.0067, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-22421", "title": "Potential authentication and CSRF tokens leak in JupyterLab", "description": "JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix.", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-44cc-43rp-5947", "https://github.com/jupyterlab/jupyterlab/commit/19bd9b96cb2e77170a67e43121637d0b5619e8c6", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UQJKNRDRFMKGVRIYNNN6CKMNJDNYWO2H/"], "fixes": ["7.0.7"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2022-29238", "noindex": false, "published": "2022-06-14T17:55:10.000Z", "modified": "2025-04-23T18:16:17.365Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "severity": "medium", "epss": 0.0112, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2022-29238", "title": "Forced Browsing in Jupyter Notebook", "description": "Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `ContentsManager.allow_hidden = False` only prevented listing the contents of hidden directories, not accessing individual hidden files or files in hidden directories (i.e. hidden files were 'hidden' but not 'inaccessible'). This could lead to notebook configurations allowing authenticated access to files that may reasonably be expected to be disallowed. Because fully authenticated requests are required, this is of relatively low impact. But if a server's root directory contains sensitive ", "references": ["https://github.com/jupyter/notebook/security/advisories/GHSA-v7vq-3x77-87vg", "https://nvd.nist.gov/vuln/detail/CVE-2022-29238"], "fixes": ["6.4.12"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2022-24758", "noindex": false, "published": "2022-03-31T22:35:09.000Z", "modified": "2025-04-23T18:43:02.027Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.01106, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2022-24758", "title": "Insertion of Sensitive Information into Log File affects Jupyter Notebook", "description": "The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds.", "references": ["https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55", "https://nvd.nist.gov/vuln/detail/CVE-2022-24758"], "fixes": ["6.4.10"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2021-32798", "noindex": false, "published": "2021-08-09T20:50:10.000Z", "modified": "2024-08-03T23:33:55.864Z", "cvss": 10, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "severity": "critical", "epss": 0.02106, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2021-32798", "title": "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook", "description": "The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.", "references": ["https://github.com/jupyter/notebook/security/advisories/GHSA-hwvq-6gjx-j797", "https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5", "https://nvd.nist.gov/vuln/detail/CVE-2021-32798"], "fixes": ["5.7.11", "6.4.1"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2021-32797", "noindex": false, "published": "2021-08-09T20:45:10.000Z", "modified": "2024-08-03T23:33:56.163Z", "cvss": 7.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "severity": "high", "epss": 0.0266, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2021-32797", "title": "JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>", "description": "JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html `<form>`. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook.", "references": ["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4952-p58q-6crx", "https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d529308830a5ae42ed", "https://nvd.nist.gov/vuln/detail/CVE-2021-32797"], "fixes": ["5.7.11", "6.4.1"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2020-26215", "noindex": false, "published": "2020-11-18T21:20:13.000Z", "modified": "2024-08-04T15:49:07.159Z", "cvss": 4.4, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L", "severity": "medium", "epss": 0.01228, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2020-26215", "title": "Open redirect in Jupyter Notebook", "description": "Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5.", "references": ["https://github.com/jupyter/notebook/security/advisories/GHSA-c7vm-f5p4-8fqh", "https://github.com/jupyter/notebook/commit/3cec4bbe21756de9f0c4bccf18cf61d840314d74", "https://lists.debian.org/debian-lts-announce/2020/12/msg00004.html"], "fixes": ["6.1.5"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2018-21030", "noindex": false, "published": "2019-10-31T14:52:45.000Z", "modified": "2024-08-05T12:19:27.469Z", "cvss": 6.9, "cvss_vector": "", "severity": "medium", "epss": 0.01443, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2018-21030", "title": "CVE-2018-21030", "description": "Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin. Thus, for example, an XSS payload can be placed in an SVG document.", "references": ["https://github.com/jupyter/notebook/pull/3341", "https://github.com/jupyter/notebook/releases/tag/5.5.0", "https://lists.debian.org/debian-lts-announce/2020/11/msg00033.html"], "fixes": ["5.5.0", "5.5.0rc1"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2019-10856", "noindex": false, "published": "2019-04-04T15:48:33.000Z", "modified": "2024-08-04T22:32:02.152Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01264, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2019-10856", "title": "CVE-2019-10856", "description": "In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc. This issue exists because of an incomplete fix for CVE-2019-10255.", "references": ["https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4", "https://github.com/jupyter/notebook/compare/16cf97c...b8e30ea", "https://nvd.nist.gov/vuln/detail/CVE-2019-10856"], "fixes": ["5.7.8"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2019-10255", "noindex": false, "published": "2019-03-28T15:30:39.000Z", "modified": "2024-08-04T22:17:19.683Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01756, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2019-10255", "title": "CVE-2019-10255", "description": "An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.", "references": ["https://github.com/jupyter/notebook/commit/d65328d4841892b412aef9015165db1eb029a8ed", "https://github.com/jupyter/notebook/commit/08c4c898182edbe97aadef1815cce50448f975cb", "https://github.com/jupyter/notebook/commit/70fe9f0ddb3023162ece21fbb77d5564306b913b"], "fixes": ["5.7.8"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2019-9644", "noindex": false, "published": "2019-03-12T06:00:00.000Z", "modified": "2024-08-04T21:54:45.055Z", "cvss": 5.4, "cvss_vector": "", "severity": "medium", "epss": 0.01531, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2019-9644", "title": "CVE-2019-9644", "description": "An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server. Access to the content of resources has been demonstrated with Internet Explorer through capturing of error messages, though not reproduced with other browsers. This occurs because Internet Explorer's error messages can include the content of any invalid JavaScript that was encountered.", "references": ["https://github.com/jupyter/notebook/compare/f3f00df...05aa4b2", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UP5RLEES2JBBNSNLBR65XM6PCD4EMF7D/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMDPJBVXOVO6LYGAT46VZNHH6JKSCURO/"], "fixes": ["5.7.6"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2018-19352", "noindex": false, "published": "2018-11-18T17:00:00.000Z", "modified": "2024-08-05T11:37:10.836Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01335, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2018-19352", "title": "CVE-2018-19352", "description": "Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.", "references": ["https://github.com/jupyter/notebook/commit/288b73e1edbf527740e273fcc69b889460871648", "https://pypi.org/project/notebook/#history", "https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rst"], "fixes": ["5.7.2"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2018-19351", "noindex": false, "published": "2018-11-18T17:00:00.000Z", "modified": "2024-08-05T11:37:10.582Z", "cvss": 6.1, "cvss_vector": "", "severity": "medium", "epss": 0.01511, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2018-19351", "title": "CVE-2018-19351", "description": "Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server. In other words, nbconvert endpoints can execute JavaScript with access to the server API. In notebook/nbconvert/handlers.py, NbconvertFileHandler and NbconvertPostHandler do not set a Content Security Policy to prevent this.", "references": ["https://groups.google.com/forum/#%21topic/jupyter/hWzu2BSsplY", "https://pypi.org/project/notebook/#history", "https://github.com/jupyter/notebook/blob/master/docs/source/changelog.rst"], "fixes": ["5.7.1"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2018-8768", "noindex": false, "published": "2018-03-18T06:00:00.000Z", "modified": "2024-08-05T07:02:26.092Z", "cvss": 8.4, "cvss_vector": "", "severity": "high", "epss": 0.01004, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2018-8768", "title": "CVE-2018-8768", "description": "In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context. Specifically, invalid HTML is 'fixed' by jQuery after sanitization, making it dangerous.", "references": ["http://openwall.com/lists/oss-security/2018/03/15/2", "https://lists.debian.org/debian-lts-announce/2020/11/msg00033.html", "https://nvd.nist.gov/vuln/detail/CVE-2018-8768"], "fixes": ["5.4.1"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}, {"id": "CVE-2015-7337", "noindex": false, "published": "2015-09-29T19:00:00.000Z", "modified": "2024-08-06T07:43:46.272Z", "cvss": 9.8, "cvss_vector": "", "severity": "critical", "epss": 0.02487, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2015-7337", "title": "CVE-2015-7337", "description": "The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files/, related to MIME types.", "references": ["https://security.gentoo.org/glsa/201512-02", "https://bugzilla.redhat.com/show_bug.cgi?id=1264067", "http://seclists.org/oss-sec/2015/q3/558"], "fixes": ["4.0.5"], "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}, {"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}]}], "total": 21, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "notebook", "path": "vulns/pypi/notebook", "ecosystem": "PyPI"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 2, "kev": 0}, "lastmod": "2026-10-13T16:09:02.990Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}