Advisories · Technology
jupyterlab-desktop.
Every CVE that names jupyterlab-desktop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL
- jupyterlab-desktop
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.5 Medium
JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses
- jupyterlab-desktop
- Code injection
- Privilege escalation
- CVSS 9.6 CriticalCritical · CVSS 9+
JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution
- jupyterlab-desktop
- Open redirect
- CVSS 5.5 Medium
JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)
- jupyterlab-desktop
- Privilege escalation
- CWE-693