Skip to content
fr Sign in
7.6 High

CVE-2024-22421 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and…

Description

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix.

Affected products and versions

Product Affected versions Fixed in
jupyterlab 4.0 4.0.0 → < 4.0.11 4.0.11
jupyterlab 3.6 earliest → < 3.6.7 3.6.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of jupyterlab

The 18 CVEs of jupyterlab →
CVE-2026-102832 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 4.2 Medium CVE-2026-102904 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 5.4 Medium CVE-2026-102831 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 8.1 High CVE-2026-102830 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 6.8 Medium
Track this CVE