CVE-2024-43805

4 advisories.

PyPI/jupyterlab CVE-2024-43805: high 7.6, EPSS 0.40%

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Action: Upgrade jupyterlab to 3.6.8 or later.

pip install jupyterlab==3.6.8

pip install jupyterlab==4.2.5

introduced	fixed	last affected
0	3.6.8	-
4.0.0	4.2.5	-

3.6.8

4.2.5

CVE-2024-43805 · published 2024-08-29T17:55:53Z · modified 2026-07-13T16:43:05.974128183Z · JSON

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Action: Upgrade notebook to 7.2.2 or later.

pip install notebook==7.2.2

introduced	fixed	last affected
7.0.0	7.2.2	-

7.2.2

CVE-2024-43805 · published 2024-08-29T17:55:53Z · modified 2026-07-13T16:43:05.974128183Z · JSON

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Action: Upgrade notebook to 7.2.2 or later.

pip install notebook==7.2.2

introduced	fixed	last affected
7.0.0	7.2.2	-

7.2.2

CVE-2024-43805 · published 2026-07-07T16:02:49.981301Z · modified 2026-07-13T16:43:05.974128183Z · JSON

HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering

Action: Upgrade jupyterlab to 3.6.8 or later.

pip install jupyterlab==3.6.8

pip install jupyterlab==4.2.5

introduced	fixed	last affected
0	3.6.8	-
4.0.0	4.2.5	-

3.6.8

4.2.5

CVE-2024-43805 · published 2026-07-13T14:36:32.612035Z · modified 2026-07-13T16:43:05.974128183Z · JSON