JupyterLab — CVE history (PyPI)
JupyterLab
18 CVEs affect the JupyterLab PyPI package (highest CVSS 9.6). Latest disclosed: 2026-10-13. Full CVE history sourced from NVD.
Summary
- Package
JupyterLab(PyPI)- Total CVEs
18- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.6- Latest disclosed
- 2026-10-13
Recent CVEs (top 18)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102832 | Medium | 4.2 | — | 2026-10-13 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-102904 | Medium | 5.4 | — | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-102831 | High | 8.1 | — | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-102830 | Medium | 6.8 | — | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-73417 | — | — | — | 2026-08-13 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-73416 | — | — | — | 2026-08-13 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-73627 | — | — | — | 2026-08-13 | JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass. |
CVE-2026-73626 | High | 7.5 | — | 2026-08-13 | JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). |
CVE-2026-73415 | — | — | — | 2026-08-12 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-67338 | Medium | 6.1 | — | 2026-08-01 | JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. |
CVE-2026-42557 | Critical | 9.6 | — | 2026-05-13 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-42266 | High | 8.8 | — | 2026-05-13 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-40171 | — | — | — | 2026-05-06 | In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting i… |
CVE-2025-59842 | Medium | 4.3 | — | 2025-09-26 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2024-43805 | High | 7.6 | — | 2024-08-28 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2024-22421 | High | 7.6 | — | 2024-01-19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. |
CVE-2024-22420 | Medium | 6.5 | — | 2024-01-19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. |
CVE-2021-32797 | High | 7.4 | — | 2021-08-09 | JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-42557 | Critical | 9.6 | — | 2026-05-13 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-42266 | High | 8.8 | — | 2026-05-13 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2026-102831 | High | 8.1 | — | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2024-43805 | High | 7.6 | — | 2024-08-28 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2024-22421 | High | 7.6 | — | 2024-01-19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. |
CVE-2026-73626 | High | 7.5 | — | 2026-08-13 | JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). |
CVE-2021-32797 | High | 7.4 | — | 2021-08-09 | JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. |
CVE-2026-102830 | Medium | 6.8 | — | 2026-09-29 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. |
CVE-2024-22420 | Medium | 6.5 | — | 2024-01-19 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. |
CVE-2026-67338 | Medium | 6.1 | — | 2026-08-01 | JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. |