{"data":{"id":"13bde615-c700-4b09-8e61-2c9f5f0b580a","title":"GHSA-rch3-82jr-f9w9: Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS","summary":"A stored XSS flaw in Jupyter Notebook lets attackers steal authentication tokens when users open malicious notebook files and click elements disguised as legitimate controls. The stolen token enables full account takeover through the Jupyter REST API, including reading and modifying files, accessing running kernels, and creating terminals.","solution":"Jupyter Notebook 7.5.6 and JupyterLab 4.5.7 include patches for this vulnerability. Workarounds: disable the help extension with `jupyter labextension disable @jupyter-notebook/help-extension` and `jupyter labextension disable @jupyterlab/help-extension`. The patched versions also allow disabling the command linker via `overrides.json` by setting `\"@jupyterlab/apputils-extension:sanitizer\": {\"allowCommandLinker\": false}`.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-rch3-82jr-f9w9","publishedAt":"2026-04-30T17:25:47.000Z","cveId":"CVE-2026-40171","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@jupyterlab/help-extension@<= 4.5.6 (fixed: 4.5.7)","jupyterlab@<= 4.5.6 (fixed: 4.5.7)","notebook@>= 7.0.0, <= 7.5.5 (fixed: 7.5.6)","@jupyter-notebook/help-extension@>= 7.0.0, <= 7.5.5 (fixed: 7.5.6)"],"affectedPackageNames":["@jupyterlab/help-extension","jupyterlab","notebook","@jupyter-notebook/help-extension"],"affectedPackageRefs":["npm:@jupyter-notebook/help-extension","pypi:notebook","pypi:jupyterlab","npm:@jupyterlab/help-extension"],"affectedVendors":["NVIDIA"],"affectedVendorsRaw":["Jupyter Notebook","JupyterLab","NVIDIA AI Red Team"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00476,"epssCheckedAt":"2026-11-10T00:11:23.585Z","kevDateAdded":null,"advisoryAliases":["GHSA-rch3-82jr-f9w9"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-04-30T17:25:47.000Z","fixReleasedAt":"2026-04-29T16:43:46.639Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:37:07.338Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"jupyterlab","fixedVersion":"4.5.7","matchedVersion":"4.5.7","fixReleasedAt":"2026-04-29T16:43:46.639Z","daysToFix":-1,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:07.191Z"},{"ecosystem":"npm","name":"@jupyterlab/help-extension","fixedVersion":"4.5.7","matchedVersion":"4.5.7","fixReleasedAt":"2026-04-29T16:46:38.469Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:07.191Z"},{"ecosystem":"npm","name":"@jupyter-notebook/help-extension","fixedVersion":"7.5.6","matchedVersion":"7.5.6","fixReleasedAt":"2026-04-30T11:46:00.233Z","daysToFix":0,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:07.191Z"},{"ecosystem":"pypi","name":"notebook","fixedVersion":"7.5.6","matchedVersion":"7.5.6","fixReleasedAt":"2026-04-30T11:46:22.342Z","daysToFix":0,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:37:07.191Z"}]}}