jupyter security advisories
8 threat alerts tracking vulnerabilities and security advisories that affect jupyter products.
Vulnios monitors jupyter CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent jupyter security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2024-39700 — jupyter — jupyterlab
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
criticalCVE-2024-39700Critical Vulnerability: CVE-2026-42557 — jupyter — jupyterlab, notebook
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinke
criticalCVE-2026-42557Critical Vulnerability: CVE-2026-44182 — jupyter — enterprise_gateway
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the server interpolates unt
criticalCVE-2026-44182Critical Vulnerability: CVE-2026-44180 — jupyter — enterprise_gateway
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohi
criticalCVE-2026-44180Critical Vulnerability: CVE-2026-44181 — jupyter — enterprise_gateway
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the env
criticalCVE-2026-44181Critical Vulnerability: CVE-2026-54527 — jupyter — jupyterlab-git
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in com
criticalCVE-2026-54527Critical Vulnerability: CVE-2021-39159 — jupyter — binderhub
BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerabil
criticalCVE-2021-39159Critical Vulnerability: CVE-2021-32798 — jupyter — notebook
The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Goog
criticalCVE-2021-32798
Track jupyter exposure across your environment
Vulnios automatically cross-references your asset inventory against new jupyter CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan