CVE-2026-102831: jupyterlab Cross-site Scripting
Vulnerability summary
CVE-2026-102831 is a high (CVSS 8.1) Cross-site Scripting vulnerability in jupyterlab. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 8.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 29-09-2026PublishedVulnerability first disclosed.
- 02-10-2026Last modifiedVulnerability information updated.
Description
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affected because their output is sanitized. This issue is fixed in JupyterLab 4.5.11 and 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.
CVSS metrics
6 scores · 6 sources · 1 version- OSV · PypiEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- OSV · DebianEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- OSV · ChainguardEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
- NVDNIST8.1HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
Change unavailable
Change unavailable
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
- CWE-345Insufficient Verification of Data AuthenticityThe product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
Affected systems
PyPI4 products
- jupyterlab≥ 4.5.0, < 4.5.11 | ≥ 4.6.0, < 4.6.4
- jupyterlite≥ 0.7.0, < 0.8.4
- jupyterlite-core≥ 0.7.0, < 0.8.4
- notebook≥ 7.5.0, < 7.6.3
Jupyterlab3 products
- jupyterlab≥ 4.5.0, < 4.5.11 | ≥ 4.6.0, < 4.6.4
- jupyterlite-core≥ 0.7.0, < 0.8.4
- notebook≥ 7.5.0, < 7.6.3
Ubuntu2 products
- jupyter-notebookAll versions (No fix recorded)
- jupyterlabAll versions (No fix recorded)
Chainguard1 product
- jupyterhub-k8s-singleuser-sample< 4.4.2-r7
Debian1 product
- jupyter-notebookAll versions (No fix recorded)
5 vendors · 11 products
References
17 links- github.com/jupyterlab/jupyterlab/security/advisories/GHSA-6966-vjj6-99xvX Refsource CONFIRMWEBREPORTAdvisory
- github.com/jupyterlab/jupyterlab/commit/1a10a7da5ff655849b21581c2633b46483ae0be9X Refsource MISCWEBREPORTFIX
- github.com/jupyterlab/jupyterlab/commit/7f9f29e29e0c83fb17b0f11da57d06b3c6a40d96X Refsource MISCWEBREPORTFIX
- github.com/jupyterlab/jupyterlab/commit/cf6e89a8d315c4134cefa50c220bca296da466a7X Refsource MISCWEBREPORTFIX
- pypi.org/project/jupyterlabPACKAGE
Show all 17 references
- pypi.org/project/jupyterlitePACKAGE
- pypi.org/project/notebookPACKAGE
