VulnerableCode Package Details - pkg:pypi/notebook@7.1.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-6ru3-na8t-nuab Aliases: CVE-2024-43805 GHSA-9q39-rmj3-p4r2	HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user.	7.2.2 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-kfax-86fe-pkfw Aliases: CVE-2026-40171 GHSA-rch3-82jr-f9w9	In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click. An attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeover of the Jupyter session through the REST API, including reading files, creating or modifying files, accessing kernels to execute arbitrary code, and creating terminals for shell access. This issue has been fixed in Notebook 7.5.6, JupyterLab 4.5.7, @jupyter-notebook/help-extension 7.5.6, and @jupyterlab/help-extension 4.5.7. As a workaround, disable the affected help extensions or set allowCommandLinker to false in the sanitizer configuration.	7.5.6 Affected by 0 other vulnerabilities. 7.6.0a0 Affected by 0 other vulnerabilities.
VCID-x1da-f4dw-tua8 Aliases: CVE-2026-42557 GHSA-mqcg-5x36-vfcg	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.	7.5.6 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-6ru3-na8t-nuab
Aliases:
CVE-2024-43805
GHSA-9q39-rmj3-p4r2

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering The vulnerability depends on user interaction by opening a malicious notebook with Markdown cells, or Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user.

7.2.2
Affected by 2 other vulnerabilities.

VCID-kfax-86fe-pkfw
Aliases:
CVE-2026-40171
GHSA-rch3-82jr-f9w9

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click. An attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeover of the Jupyter session through the REST API, including reading files, creating or modifying files, accessing kernels to execute arbitrary code, and creating terminals for shell access. This issue has been fixed in Notebook 7.5.6, JupyterLab 4.5.7, @jupyter-notebook/help-extension 7.5.6, and @jupyterlab/help-extension 4.5.7. As a workaround, disable the affected help extensions or set allowCommandLinker to false in the sanitizer configuration.

7.5.6
Affected by 0 other vulnerabilities.

7.6.0a0
Affected by 0 other vulnerabilities.

VCID-x1da-f4dw-tua8
Aliases:
CVE-2026-42557
GHSA-mqcg-5x36-vfcg

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.

7.5.6
Affected by 0 other vulnerabilities.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-06T08:29:44.795662+00:00	GitLab Importer	Affected by	VCID-x1da-f4dw-tua8	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/notebook/CVE-2026-42557.yml	38.6.0
2026-06-06T08:23:30.905790+00:00	GitLab Importer	Affected by	VCID-kfax-86fe-pkfw	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/notebook/CVE-2026-40171.yml	38.6.0
2026-06-06T05:20:52.274764+00:00	GitLab Importer	Affected by	VCID-6ru3-na8t-nuab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/notebook/CVE-2024-43805.yml	38.6.0