Jupyter: Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Affects: Jupyter
Jupyter vulnerabilities
- Product
- Jupyter
- Vendor
- Project Jupyter
- Kind
- Notebook environment
Securaity has published 18 advisories for Jupyter: 1 Critical, 7 High, 9 Medium, 1 Low.
Jupyter is a notebook environment maintained by Project Jupyter. It gives people an interactive place to write and run code, notes and charts together in documents called notebooks, so the code and the results it produces sit side by side. This kind of software is widely used for data and AI work. Jupyter is typically installed and run by data analysts, researchers and students, as well as by developers.
Advisories
Jupyter: JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one…
Affects: Jupyter
Jupyter: JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package…
Affects: Jupyter
Jupyter: JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files…
Affects: Jupyter
Jupyter: JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system…
Affects: Jupyter
Jupyter: JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
Affects: Jupyter
Jupyter: JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
Affects: Jupyter
Jupyter: JupyterLab: PyPI extension blocklist package-name canonicalization bypass
Affects: Jupyter
Jupyter: JupyterLab PluginManager lock-rule enforcement bypass
Affects: Jupyter
Jupyter: JupyterLab: Allowlist/blocklist check in `PyPIExtensionManager.install()` not enforced for…
Affects: Jupyter
Jupyter: Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing…
Affects: Jupyter
Jupyter: JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol
Affects: Jupyter
Jupyter: JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted…
Affects: Jupyter
Jupyter: JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious)…
Affects: Jupyter
Jupyter: Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Affects: Jupyter
Jupyter: Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Affects: Jupyter
Jupyter: Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to…
Affects: Jupyter
Jupyter: Jupyter Server has an open redirection vulnerability in `next` query parameter
Affects: Jupyter