jupyter-base-notebook

Direct Vulnerabilities

Known vulnerabilities in the jupyter-base-notebook package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
GHSA-2v8p-3f2j-5mp7

<7.6.3-r2
  • L
CVE-2026-16221

<7.6.3-r2
  • L
GHSA-f65p-4m7j-42xc

<7.6.3-r2
  • L
Improper Resource Shutdown or Release

<7.6.3-r2
  • L
GHSA-r6q2-hw4h-h46w

<7.6.3-r2
  • L
GHSA-hrr3-gc8f-f4qj

<7.6.3-r2
  • H
Directory Traversal

<7.6.3-r2
  • L
Improper Check for Unusual or Exceptional Conditions

<7.6.3-r2
  • L
GHSA-52f5-9888-hmc6

<7.6.3-r2
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
GHSA-r28c-9q8g-f849

<7.6.3-r2
  • L
GHSA-jmg2-rcxh-w8q3

<7.6.3-r2
  • H
Uncontrolled Recursion

<7.6.3-r2
  • L
GHSA-ph9p-34f9-6g65

<7.6.3-r2
  • M
Improper Resource Shutdown or Release

<7.6.3-r2
  • L
CVE-2026-90711

<7.6.3-r2
  • L
GHSA-6rw7-vpxm-498p

<7.6.3-r2
  • L
GHSA-v2hh-gcrm-f6hx

<7.6.3-r2
  • M
CVE-2026-2950

<7.6.3-r2
  • L
GHSA-7p8r-x3mc-p8w7

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
GHSA-h67p-54hq-rp68

<7.6.3-r2
  • L
GHSA-442j-39wm-28r2

<7.6.3-r2
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • L
GHSA-fxqj-rqcc-2cmp

<7.6.3-r2
  • L
GHSA-c4c3-pg64-4m4v

<7.6.3-r2
  • L
CVE-2026-12590

<7.6.3-r2
  • L
GHSA-23hp-3jrh-7fpw

<7.6.3-r2
  • L
GHSA-fph4-wmhf-6fwf

<7.6.3-r2
  • L
GHSA-2g4f-4pwh-qvx6

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-w5hq-g745-h8pq

<7.6.3-r2
  • L
GHSA-2883-xcg3-v3hh

<7.6.3-r2
  • L
Allocation of Resources Without Limits or Throttling

<7.6.3-r2
  • L
GHSA-4c8g-83qw-93j6

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-r5fr-rjxr-66jc

<7.6.3-r2
  • L
GHSA-2p57-rm9w-gvfp

<7.6.3-r2
  • L
Directory Traversal

<7.6.3-r2
  • L
CVE-2026-87776

<7.6.3-r2
  • L
CVE-2026-84292

<7.6.3-r2
  • L
GHSA-2v37-7h3g-55p8

<7.6.3-r2
  • L
CVE-2026-8723

<7.6.3-r2
  • L
CVE-2024-29415

<7.6.3-r2
  • L
GHSA-55q2-fjhq-7xh7

<7.6.3-r2
  • L
GHSA-w7fw-mjwx-w883

<7.6.3-r2
  • L
GHSA-mh99-v99m-4gvg

<7.6.3-r2
  • C
CVE-2026-4800

<7.6.3-r2
  • L
GHSA-f5x3-32g6-xq36

<7.6.3-r2
  • L
GHSA-6688-9rhm-gjv2

<7.6.3-r2
  • L
GHSA-jxwj-j7wr-gfrw

<7.6.3-r2
  • L
CVE-2026-18446

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
GHSA-vccv-cmxp-4j9h

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-28wg-ghj8-5hjv

<7.6.3-r2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-7r86-cg39-jmmj

<7.6.3-r2
  • L
Interpretation Conflict

<7.6.3-r2
  • L
CVE-2026-76172

<7.6.3-r2
  • L
GHSA-8qq5-rm4j-mr97

<7.6.3-r2
  • L
GHSA-xwg4-73v4-xw9w

<7.6.3-r2
  • L
GHSA-68fv-2mgg-jv7q

<7.6.3-r2
  • L
GHSA-g8qq-57p8-ggw5

<7.6.3-r2
  • M
Link Following

<7.6.3-r2
  • L
CVE-2026-86472

<7.6.3-r2
  • M
CVE-2024-21501

<7.6.3-r2
  • L
GHSA-w8wr-v893-vjvp

<7.6.3-r2
  • L
GHSA-rj75-hqrm-r3gf

<7.6.3-r2
  • L
GHSA-83g3-92jg-28cx

<7.6.3-r2
  • L
GHSA-73wf-gq98-2v4g

<7.6.3-r2
  • H
Out-of-bounds Write

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
GHSA-r292-9mhp-454m

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
CVE-2026-75899

<7.6.3-r2
  • L
GHSA-52cp-r559-cp3m

<7.6.3-r2
  • L
Integer Overflow or Wraparound

<7.6.3-r2
  • L
Incorrect Type Conversion or Cast

<7.6.3-r2
  • L
GHSA-c2j3-45gr-mqc4

<7.6.3-r2
  • L
GHSA-vfj7-8cjw-p6xm

<7.6.3-r2
  • H
Directory Traversal

<7.6.3-r2
  • L
GHSA-7rx3-28cr-v5wh

<7.6.3-r2
  • L
Unchecked Input for Loop Condition

<7.6.3-r2
  • L
GHSA-xhpv-hc6g-r9c6

<7.6.3-r2
  • L
GHSA-7f2v-3qq3-vvjf

<7.6.3-r2
  • L
GHSA-qffp-2rhf-9h96

<7.6.3-r2
  • L
GHSA-5p4m-2wfm-xmqj

<7.6.3-r2
  • L
GHSA-mh29-5h37-fv8m

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
CVE-2024-28863

<7.6.3-r2
  • L
GHSA-23c5-xmqv-rm74

<7.6.3-r2
  • M
CVE-2025-13465

<7.6.3-r2
  • L
Reliance on Untrusted Inputs in a Security Decision

<7.6.3-r2
  • H
Use of Uninitialized Resource

<7.6.3-r2
  • M
Improper Validation of Specified Quantity in Input

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
Improper Input Validation

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
GHSA-2qvq-rjwj-gvw9

<7.6.3-r2
  • L
GHSA-v422-hmwv-36x6

<7.6.3-r2
  • L
GHSA-w5vr-8v7q-w6rv

<7.6.3-r2
  • L
GHSA-3mfm-83xf-c92r

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
GHSA-m9rg-mr6g-75gm

<7.6.3-r2
  • L
GHSA-rhh3-jpg6-66xh

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-9cx6-37pm-9jff

<7.6.3-r2
  • L
GHSA-gvwx-54wh-qm9j

<7.6.3-r2
  • L
GHSA-4mjr-xmp4-gh2g

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • L
GHSA-w9m9-85wc-3x92

<7.6.3-r2
  • L
GHSA-238p-pmpm-9mq7

<7.6.3-r2
  • L
GHSA-96hv-2xvq-fx4p

<7.6.3-r2
  • L
CVE-2026-13676

<7.6.3-r2
  • L
GHSA-xxjr-mmjv-4gpg

<7.6.3-r2
  • L
GHSA-gr94-w7qr-f4j3

<7.6.3-r2
  • L
CVE-2026-75975

<7.6.3-r2
  • L
Directory Traversal

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
Allocation of Resources Without Limits or Throttling

<7.6.3-r2
  • L
OS Command Injection

<7.6.3-r2
  • H
Improper Validation of Specified Quantity in Input

<7.6.3-r2
  • L
GHSA-jqcg-44mw-7w3h

<7.6.3-r2
  • L
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
GHSA-q8mj-m7cp-5q26

<7.6.3-r2
  • L
GHSA-5j98-mcp5-4vw2

<7.6.3-r2
  • L
CVE-2026-82417

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
GHSA-vc2v-76pw-4v95

<7.6.3-r2
  • L
Information Exposure

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • H
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
CVE-2025-15284

<7.6.3-r2
  • L
GHSA-3ppc-4f35-3m26

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
GHSA-q2hr-2g5m-vwhr

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-qw65-cvwx-89v3

<7.6.3-r2
  • L
GHSA-jxrp-r7gx-q4j8

<7.6.3-r2
  • L
GHSA-34x7-hfp2-rc4v

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-hp3w-g68c-fv3c

<7.6.3-r2
  • H
CVE-2026-2391

<7.6.3-r2
  • L
GHSA-rgw5-rvv9-x895

<7.6.3-r2
  • L
GHSA-2w6w-674q-4c4q

<7.6.3-r2
  • L
GHSA-3rrr-jr9j-h3q3

<7.6.3-r2
  • L
GHSA-xjpj-3mr7-gcpf

<7.6.3-r2
  • L
GHSA-rm97-x556-q36h

<7.6.3-r2
  • L
Improper Input Validation

<7.6.3-r2
  • L
GHSA-qhr7-859c-m2p7

<7.6.3-r2
  • L
CVE-2026-14257

<7.6.3-r2
  • L
GHSA-c83g-rgw3-j3cx

<7.6.3-r2
  • M
Improper Handling of Unicode Encoding

<7.6.3-r2
  • L
GHSA-f23m-r3pf-42rh

<7.6.3-r2
  • L
GHSA-6j4f-fj2g-mc7p

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
GHSA-2gc4-cqfq-p2gv

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-2m8v-j782-fhvr

<7.6.3-r2
  • L
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • L
GHSA-6x64-9x62-f2gx

<7.6.3-r2
  • L
GHSA-r635-g3xr-vw7x

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-9ppj-qmqm-q256

<7.6.3-r2
  • L
GHSA-jqff-g426-hqxp

<7.6.3-r2
  • L
GHSA-58qx-3vcg-4xpx

<7.6.3-r2
  • L
CVE-2026-45819

<7.6.3-r2
  • H
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-8x88-c5mf-7j5w

<7.6.3-r2
  • L
GHSA-vmf3-w455-68vh

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r1
  • L
Information Exposure

<7.6.3-r1
  • L
GHSA-hj66-6f7g-4r5v

<7.6.3-r1
  • L
GHSA-xpv3-w29h-x7cv

<7.6.3-r1
  • L
GHSA-c3mw-737p-c7g2

<7.6.2-r3
  • L
Information Exposure Through Log Files

<7.6.2-r3
  • L
GHSA-3jxr-9vmj-r5cp

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
CVE-2026-13149

<7.6.3-r2
  • L
GHSA-v6h2-p8h4-qcjw

<7.6.3-r2
  • L
GHSA-f886-m6hf-6m8v

<7.6.3-r2
  • H
Resource Exhaustion

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.0-r1
  • L
GHSA-qcq2-496w-v96p

<7.6.0-r1
  • L
GHSA-537c-gmf6-5ccf

<7.5.7-r2
  • M
Information Exposure

<7.5.6-r1
  • M
Inefficient Regular Expression Complexity

<7.5.6-r1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.6-r1
  • L
GHSA-65pc-fj4g-8rjx

<7.5.6-r1
  • L
GHSA-qccp-gfcp-xxvc

<7.5.6-r1
  • L
GHSA-mf9v-mfxr-j63j

<7.5.6-r1
  • H
Directory Traversal

<7.5.5-r4
  • L
GHSA-rch3-82jr-f9w9

<7.5.6-r0
  • L
Cross-site Scripting (XSS)

<7.5.6-r0
  • L
GHSA-p423-j2cm-9vmq

<7.5.5-r4
  • L
GHSA-v92g-xgxw-vvmm

<7.5.5-r4
  • C
Out-of-Bounds

<7.5.5-r4
  • L
GHSA-gc5v-m9x4-r6x2

<7.5.5-r1
  • M
Improper Certificate Validation

<7.5.5-r1
  • M
Insecure Temporary File

<7.5.5-r1
  • L
Resource Exhaustion

<7.5.5-r1
  • L
GHSA-5239-wwwm-4pmq

<7.5.5-r1
  • L
GHSA-m959-cc7f-wv43

<7.5.5-r1
  • M
CVE-2026-26007

<7.5.3-r2
  • L
GHSA-r6ph-v2qm-q3c2

<7.5.3-r2
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.2-r0
  • L
GHSA-38jv-5279-wg99

<7.5.2-r0
  • L
GHSA-9mvj-f7w8-pvh2

<7.4.7-r0
  • M
Cross-site Scripting (XSS)

<7.4.7-r0
  • H
Allocation of Resources Without Limits or Throttling

<7.5.0-r1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.0-r1
  • L
GHSA-gm62-xv2j-4w53

<7.5.0-r1
  • L
GHSA-2xpw-w6gg-jr37

<7.5.0-r1
  • M
Open Redirect

<7.4.3-r2
  • L
GHSA-48p4-8xcf-vxj5

<7.4.3-r2
  • L
GHSA-pq67-6m6q-mj2v

<7.4.3-r2
  • M
Open Redirect

<7.4.3-r2
  • L
Insufficiently Protected Credentials

<7.4.3-r1
  • L
Allocation of Resources Without Limits or Throttling

<7.4.2-r2
  • L
HTTP Request Smuggling

<7.4.1-r1
  • H
Improper Neutralization of Special Elements Used in a Template Engine

<7.3.2-r2