Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

jupyter — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting jupyter. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Jupyter serves as an interactive computing platform widely used for data analysis, machine learning, and scientific research. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and authentication flaws. Notable security characteristics include its web-based interface and notebook architecture, which can expose sensitive data if improperly configured. While no major public incidents have been widely documented, the 14 CVEs on record highlight ongoing security concerns, particularly around unauthorized access and code execution risks. Proper configuration and regular updates remain critical for secure deployment in production environments.

CVE ID Title CVSS Severity Published
CVE-2026-86258 nbviewer through 1.0.1 Path Traversal via LocalFileHandler — nbviewer CWE-22 5.9 Medium 2026-09-06
CVE-2026-6658 Cross-site Scripting (XSS) in jupyter/nbconvert — jupyter/jupyter CWE-79 - - 2026-06-26
CVE-2026-6657 CORS Origin Validation Bypass in jupyter-server — jupyter/jupyter CWE-346 - - 2026-06-03
CVE-2026-5422 Path Traversal in jupyter/jupyter — jupyter/jupyter CWE-23 - - 2026-06-02
CVE-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker — notebook CWE-79 5.4AI Medium AI 2026-05-06
CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding — nbconvert CWE-22 6.5 Medium 2026-04-21
CVE-2026-39377 nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames — nbconvert CWE-22 6.5 Medium 2026-04-21
CVE-2025-53000 nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows — nbconvert CWE-427 8.8AI High AI 2025-12-17
CVE-2025-30167 Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability — jupyter_core CWE-427 7.3 High 2025-06-03
CVE-2025-23205 `frame-ancestors: self` grants all users access to formgrader in nbgrader — nbgrader CWE-668 6.5 - 2025-01-17
CVE-2022-39286 Execution with Unnecessary Privileges in JupyterApp — jupyter_core CWE-269 8.8 High 2022-10-26
CVE-2021-32862 nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths — nbconvert CWE-79 7.5 High 2022-08-18
CVE-2022-29238 Forced Browsing in Jupyter Notebook — notebook CWE-425 4.3 Medium 2022-06-14
CVE-2022-24758 Insertion of Sensitive Information into Log File affects Jupyter Notebook — notebook CWE-532 7.5 High 2022-03-31
CVE-2021-41134 Stored XSS in Jupyter nbdime — nbdime CWE-79 8.7 High 2021-11-03
CVE-2021-32798 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in notebook — notebook CWE-79 10.0 Critical 2021-08-09
CVE-2020-26232 Open redirect in Jupyter Server — jupyter_server CWE-601 4.1 Medium 2020-11-24
CVE-2020-26215 Open redirect in Jupyter Notebook — notebook CWE-601 4.4 Medium 2020-11-18

This page lists every published CVE security advisory associated with jupyter. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.