jupyter-base-notebook

Direct Vulnerabilities

Known vulnerabilities in the jupyter-base-notebook package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
GHSA-jmg2-rcxh-w8q3

<7.6.3-r2
  • L
Directory Traversal

<7.6.3-r2
  • L
GHSA-jqcg-44mw-7w3h

<7.6.3-r2
  • L
Improper Check for Unusual or Exceptional Conditions

<7.6.3-r2
  • L
GHSA-2v37-7h3g-55p8

<7.6.3-r2
  • M
Improper Handling of Unicode Encoding

<7.6.3-r2
  • H
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-52cp-r559-cp3m

<7.6.3-r2
  • L
GHSA-c2j3-45gr-mqc4

<7.6.3-r2
  • L
CVE-2026-12590

<7.6.3-r2
  • L
GHSA-7r86-cg39-jmmj

<7.6.3-r2
  • L
GHSA-96hv-2xvq-fx4p

<7.6.3-r2
  • L
GHSA-hrr3-gc8f-f4qj

<7.6.3-r2
  • L
GHSA-7f2v-3qq3-vvjf

<7.6.3-r2
  • M
Link Following

<7.6.3-r2
  • L
GHSA-4mjr-xmp4-gh2g

<7.6.3-r2
  • L
GHSA-23c5-xmqv-rm74

<7.6.3-r2
  • L
CVE-2025-15284

<7.6.3-r2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
CVE-2026-84292

<7.6.3-r2
  • L
Unchecked Input for Loop Condition

<7.6.3-r2
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
GHSA-qffp-2rhf-9h96

<7.6.3-r2
  • L
GHSA-7rx3-28cr-v5wh

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
GHSA-xwg4-73v4-xw9w

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-r28c-9q8g-f849

<7.6.3-r2
  • L
GHSA-xhpv-hc6g-r9c6

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
GHSA-3mfm-83xf-c92r

<7.6.3-r2
  • L
GHSA-8x88-c5mf-7j5w

<7.6.3-r2
  • L
GHSA-3rrr-jr9j-h3q3

<7.6.3-r2
  • L
CVE-2026-86472

<7.6.3-r2
  • L
GHSA-q8mj-m7cp-5q26

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • M
CVE-2025-13465

<7.6.3-r2
  • L
GHSA-52f5-9888-hmc6

<7.6.3-r2
  • L
GHSA-5j98-mcp5-4vw2

<7.6.3-r2
  • L
GHSA-r292-9mhp-454m

<7.6.3-r2
  • L
GHSA-28wg-ghj8-5hjv

<7.6.3-r2
  • L
GHSA-c4c3-pg64-4m4v

<7.6.3-r2
  • L
GHSA-ph9p-34f9-6g65

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • M
Improper Resource Shutdown or Release

<7.6.3-r2
  • L
GHSA-58qx-3vcg-4xpx

<7.6.3-r2
  • L
GHSA-3ppc-4f35-3m26

<7.6.3-r2
  • L
CVE-2026-75899

<7.6.3-r2
  • L
Incorrect Type Conversion or Cast

<7.6.3-r2
  • L
GHSA-h67p-54hq-rp68

<7.6.3-r2
  • L
CVE-2026-8723

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • H
Directory Traversal

<7.6.3-r2
  • L
CVE-2026-14257

<7.6.3-r2
  • L
GHSA-2p57-rm9w-gvfp

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
CVE-2026-87776

<7.6.3-r2
  • L
GHSA-f23m-r3pf-42rh

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
CVE-2026-82417

<7.6.3-r2
  • L
GHSA-vfj7-8cjw-p6xm

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-rj75-hqrm-r3gf

<7.6.3-r2
  • L
OS Command Injection

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • L
GHSA-v2hh-gcrm-f6hx

<7.6.3-r2
  • H
Improper Validation of Specified Quantity in Input

<7.6.3-r2
  • L
GHSA-9cx6-37pm-9jff

<7.6.3-r2
  • L
GHSA-hp3w-g68c-fv3c

<7.6.3-r2
  • L
CVE-2024-29415

<7.6.3-r2
  • L
GHSA-238p-pmpm-9mq7

<7.6.3-r2
  • H
CVE-2026-2391

<7.6.3-r2
  • L
GHSA-2qvq-rjwj-gvw9

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • H
Use of Uninitialized Resource

<7.6.3-r2
  • L
CVE-2026-16221

<7.6.3-r2
  • L
GHSA-xxjr-mmjv-4gpg

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • L
GHSA-2w6w-674q-4c4q

<7.6.3-r2
  • L
Reliance on Untrusted Inputs in a Security Decision

<7.6.3-r2
  • L
GHSA-jqff-g426-hqxp

<7.6.3-r2
  • L
GHSA-m9rg-mr6g-75gm

<7.6.3-r2
  • L
GHSA-qw65-cvwx-89v3

<7.6.3-r2
  • L
GHSA-rgw5-rvv9-x895

<7.6.3-r2
  • L
GHSA-w8wr-v893-vjvp

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
CVE-2026-90711

<7.6.3-r2
  • L
GHSA-2m8v-j782-fhvr

<7.6.3-r2
  • L
GHSA-r6q2-hw4h-h46w

<7.6.3-r2
  • L
GHSA-6688-9rhm-gjv2

<7.6.3-r2
  • L
GHSA-w7fw-mjwx-w883

<7.6.3-r2
  • L
GHSA-vmf3-w455-68vh

<7.6.3-r2
  • L
GHSA-6rw7-vpxm-498p

<7.6.3-r2
  • L
Integer Overflow or Wraparound

<7.6.3-r2
  • L
GHSA-vccv-cmxp-4j9h

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-qhr7-859c-m2p7

<7.6.3-r2
  • L
GHSA-mh29-5h37-fv8m

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
GHSA-jxwj-j7wr-gfrw

<7.6.3-r2
  • L
GHSA-2g4f-4pwh-qvx6

<7.6.3-r2
  • C
CVE-2026-4800

<7.6.3-r2
  • L
GHSA-7p8r-x3mc-p8w7

<7.6.3-r2
  • L
GHSA-r635-g3xr-vw7x

<7.6.3-r2
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<7.6.3-r2
  • L
GHSA-68fv-2mgg-jv7q

<7.6.3-r2
  • L
CVE-2026-18446

<7.6.3-r2
  • L
GHSA-gvwx-54wh-qm9j

<7.6.3-r2
  • L
GHSA-6x64-9x62-f2gx

<7.6.3-r2
  • M
CVE-2024-21501

<7.6.3-r2
  • L
GHSA-jxrp-r7gx-q4j8

<7.6.3-r2
  • L
Improper Resource Shutdown or Release

<7.6.3-r2
  • H
Out-of-bounds Write

<7.6.3-r2
  • L
GHSA-fph4-wmhf-6fwf

<7.6.3-r2
  • L
GHSA-2gc4-cqfq-p2gv

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • L
GHSA-34x7-hfp2-rc4v

<7.6.3-r2
  • L
GHSA-f5x3-32g6-xq36

<7.6.3-r2
  • L
Algorithmic Complexity

<7.6.3-r2
  • L
GHSA-rhh3-jpg6-66xh

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
GHSA-rm97-x556-q36h

<7.6.3-r2
  • L
Improper Input Validation

<7.6.3-r2
  • L
Directory Traversal

<7.6.3-r2
  • L
Improper Input Validation

<7.6.3-r2
  • L
GHSA-mh99-v99m-4gvg

<7.6.3-r2
  • L
GHSA-2v8p-3f2j-5mp7

<7.6.3-r2
  • L
GHSA-r5fr-rjxr-66jc

<7.6.3-r2
  • H
Uncontrolled Recursion

<7.6.3-r2
  • L
GHSA-73wf-gq98-2v4g

<7.6.3-r2
  • L
CVE-2026-45819

<7.6.3-r2
  • H
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
Allocation of Resources Without Limits or Throttling

<7.6.3-r2
  • L
Arbitrary Code Injection

<7.6.3-r2
  • L
Information Exposure

<7.6.3-r2
  • L
CVE-2026-75975

<7.6.3-r2
  • L
GHSA-c83g-rgw3-j3cx

<7.6.3-r2
  • L
Interpretation Conflict

<7.6.3-r2
  • L
GHSA-442j-39wm-28r2

<7.6.3-r2
  • M
CVE-2026-2950

<7.6.3-r2
  • L
GHSA-xjpj-3mr7-gcpf

<7.6.3-r2
  • L
GHSA-6j4f-fj2g-mc7p

<7.6.3-r2
  • L
GHSA-g8qq-57p8-ggw5

<7.6.3-r2
  • L
GHSA-2883-xcg3-v3hh

<7.6.3-r2
  • L
CVE-2026-13676

<7.6.3-r2
  • L
GHSA-23hp-3jrh-7fpw

<7.6.3-r2
  • L
Uncaught Exception

<7.6.3-r2
  • L
GHSA-55q2-fjhq-7xh7

<7.6.3-r2
  • L
GHSA-w9m9-85wc-3x92

<7.6.3-r2
  • M
Directory Traversal

<7.6.3-r2
  • L
GHSA-w5vr-8v7q-w6rv

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-gr94-w7qr-f4j3

<7.6.3-r2
  • L
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

<7.6.3-r2
  • L
GHSA-83g3-92jg-28cx

<7.6.3-r2
  • L
GHSA-8qq5-rm4j-mr97

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-vc2v-76pw-4v95

<7.6.3-r2
  • L
CVE-2026-76172

<7.6.3-r2
  • L
GHSA-9ppj-qmqm-q256

<7.6.3-r2
  • L
Allocation of Resources Without Limits or Throttling

<7.6.3-r2
  • L
GHSA-q2hr-2g5m-vwhr

<7.6.3-r2
  • H
Directory Traversal

<7.6.3-r2
  • L
GHSA-5p4m-2wfm-xmqj

<7.6.3-r2
  • L
GHSA-f65p-4m7j-42xc

<7.6.3-r2
  • L
Inefficient Regular Expression Complexity

<7.6.3-r2
  • L
GHSA-fxqj-rqcc-2cmp

<7.6.3-r2
  • M
Improper Validation of Specified Quantity in Input

<7.6.3-r2
  • M
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
Cross-site Scripting (XSS)

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-4c8g-83qw-93j6

<7.6.3-r2
  • L
CVE-2024-28863

<7.6.3-r2
  • L
GHSA-w5hq-g745-h8pq

<7.6.3-r2
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-v422-hmwv-36x6

<7.6.3-r2
  • L
GHSA-xpv3-w29h-x7cv

<7.6.3-r1
  • L
Cross-site Scripting (XSS)

<7.6.3-r1
  • L
GHSA-hj66-6f7g-4r5v

<7.6.3-r1
  • L
Information Exposure

<7.6.3-r1
  • L
Information Exposure Through Log Files

<7.6.2-r3
  • L
GHSA-c3mw-737p-c7g2

<7.6.2-r3
  • L
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-v6h2-p8h4-qcjw

<7.6.3-r2
  • L
GHSA-f886-m6hf-6m8v

<7.6.3-r2
  • L
GHSA-3jxr-9vmj-r5cp

<7.6.3-r2
  • L
CVE-2026-13149

<7.6.3-r2
  • H
Resource Exhaustion

<7.6.3-r2
  • L
GHSA-qcq2-496w-v96p

<7.6.0-r1
  • L
Resource Exhaustion

<7.6.0-r1
  • L
GHSA-537c-gmf6-5ccf

<7.5.7-r2
  • M
Information Exposure

<7.5.6-r1
  • L
GHSA-65pc-fj4g-8rjx

<7.5.6-r1
  • L
GHSA-mf9v-mfxr-j63j

<7.5.6-r1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.6-r1
  • M
Inefficient Regular Expression Complexity

<7.5.6-r1
  • L
GHSA-qccp-gfcp-xxvc

<7.5.6-r1
  • H
Directory Traversal

<7.5.5-r4
  • L
Cross-site Scripting (XSS)

<7.5.6-r0
  • L
GHSA-rch3-82jr-f9w9

<7.5.6-r0
  • L
GHSA-v92g-xgxw-vvmm

<7.5.5-r4
  • L
GHSA-p423-j2cm-9vmq

<7.5.5-r4
  • C
Out-of-Bounds

<7.5.5-r4
  • M
Improper Certificate Validation

<7.5.5-r1
  • L
GHSA-m959-cc7f-wv43

<7.5.5-r1
  • L
GHSA-gc5v-m9x4-r6x2

<7.5.5-r1
  • L
Resource Exhaustion

<7.5.5-r1
  • M
Insecure Temporary File

<7.5.5-r1
  • L
GHSA-5239-wwwm-4pmq

<7.5.5-r1
  • H
Allocation of Resources Without Limits or Throttling

<7.5.0-r1
  • L
GHSA-2xpw-w6gg-jr37

<7.5.0-r1
  • L
GHSA-7cx3-6m66-7c5m

<7.4.2-r2
  • L
HTTP Request Smuggling

<7.4.1-r1
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.2-r0
  • L
GHSA-9hjg-9r4m-mvj7

<7.4.3-r1
  • L
GHSA-gm62-xv2j-4w53

<7.5.0-r1
  • L
Allocation of Resources Without Limits or Throttling

<7.4.2-r2
  • M
Cross-site Scripting (XSS)

<7.4.7-r0
  • M
Open Redirect

<7.4.3-r2
  • L
Insufficiently Protected Credentials

<7.4.3-r1
  • L
GHSA-48p4-8xcf-vxj5

<7.4.3-r2
  • H
Improper Neutralization of Special Elements Used in a Template Engine

<7.3.2-r2
  • M
CVE-2026-26007

<7.5.3-r2
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<7.5.0-r1
  • L
GHSA-r6ph-v2qm-q3c2

<7.5.3-r2
  • L
GHSA-pq67-6m6q-mj2v

<7.4.3-r2
  • L
GHSA-9mvj-f7w8-pvh2

<7.4.7-r0
  • L
GHSA-38jv-5279-wg99

<7.5.2-r0
  • L
GHSA-cpwx-vrp4-4pq7

<7.3.2-r2
  • M
Open Redirect

<7.4.3-r2
  • L
GHSA-vqfr-h8mv-ghfj

<7.4.1-r1