10.0
Critique
CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interactive computing
Description
The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.
Produits et versions touchés
Autres CVE de notebook
Les 6 CVE de notebook →
CVE-2026-42557
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
8.6
Élevée
CVE-2026-40171
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding…
8.4
Élevée
CVE-2022-29238
Jupyter Notebook is a web-based notebook environment for interactive computing
4.3
Moyenne
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing
7.5
Élevée