High
CVE-2014-3429
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 67
Reset filters
Medium
CVE-2019-9644
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
High
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Medium
CVE-2022-21697
SSRF vulnerability in jupyter-server-proxy
Medium
CVE-2021-32797
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
High
CVE-2021-32798
Special Element Injection in notebook
Medium
CVE-2020-26275
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1
Medium
CVE-2020-26232
Open redirect in Jupyter Server
Low
CVE-2020-26215
Open redirect in Jupyter Notebook
Medium
CVE-2018-21030
Cross-site scripting in Jupyter Notebook
Medium
CVE-2019-1020019
Cross-site Scripting in invenio-previewer
Medium
CVE-2019-10856
Jupyter Notebook open redirect vulnerability
Medium
CVE-2019-10255
Open Redirect vulnerability in jupyterhub and notebook
Medium
CVE-2018-19352
Jupyter Notebook XSS via directory name
Medium
CVE-2018-19351
Jupyter Notebook XSS via untrusted notebooks
High
CVE-2018-8768
Jupyter Notebook file bypasses sanitization, executes JavaScript
Medium
CVE-2015-4707
Improper Neutralization of Input During Web Page Generation in IPython
Critical
CVE-2015-7337
Improper Input Validation in Jupyter Notebook
Medium
CVE-2015-6938
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.