Skip to content
fr Sign in
10.0 Critical

CVE-2021-32798 The Jupyter notebook is a web-based notebook environment for interactive computing

Description

The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.

Affected products and versions

Product Affected versions Fixed in
notebook 6.0 6.0.0 → < 6.4.1 6.4.1
notebook 5.7 earliest → < 5.7.11 5.7.11

References

Timeline

  1. Published
  2. Last modified

Other CVEs of notebook

The 6 CVEs of notebook →
CVE-2026-42557 jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 8.6 High CVE-2026-40171 In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding… 8.4 High CVE-2022-29238 Jupyter Notebook is a web-based notebook environment for interactive computing 4.3 Medium CVE-2022-24758 The Jupyter notebook is a web-based notebook environment for interactive computing 7.5 High
Track this CVE