{"data":{"ecosystem":"pypi","name":"notebook","url":"https://aisecwatch.com/packages/pypi/notebook","latestVersion":"7.6.3","firstReleaseAt":"2015-07-30T21:45:08.115Z","repository":"https://github.com/jupyter/notebook","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"hatch","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"ipykernel","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"jupyter-builder","versionSpec":"<2,>=1.0.2","scope":"runtime"},{"ecosystem":"pypi","name":"jupyterlab","versionSpec":"<4.7,>=4.6.4","scope":"runtime"},{"ecosystem":"pypi","name":"jupyterlab-server","versionSpec":"<3,>=2.28.0","scope":"runtime"},{"ecosystem":"pypi","name":"jupyter-server","versionSpec":"<3,>=2.19.0","scope":"runtime"},{"ecosystem":"pypi","name":"myst-parser","versionSpec":null,"scope":"extra:docs"},{"ecosystem":"pypi","name":"nbsphinx","versionSpec":null,"scope":"extra:docs"},{"ecosystem":"pypi","name":"nbval","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"notebook-shim","versionSpec":"<0.3,>=0.2","scope":"runtime"},{"ecosystem":"pypi","name":"pre-commit","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"pydata-sphinx-theme","versionSpec":null,"scope":"extra:docs"},{"ecosystem":"pypi","name":"pytest","versionSpec":">=7.0","scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-console-scripts","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-timeout","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-tornasync","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"sphinx","versionSpec":">=1.3.6","scope":"extra:docs"},{"ecosystem":"pypi","name":"sphinxcontrib-github-alt","versionSpec":null,"scope":"extra:docs"},{"ecosystem":"pypi","name":"sphinxcontrib-spelling","versionSpec":null,"scope":"extra:docs"},{"ecosystem":"pypi","name":"tornado","versionSpec":">=6.2.0","scope":"runtime"}],"advisories":[{"id":"13bde615-c700-4b09-8e61-2c9f5f0b580a","url":"https://aisecwatch.com/issues/13bde615-c700-4b09-8e61-2c9f5f0b580a","cveId":"CVE-2026-40171","title":"GHSA-rch3-82jr-f9w9: Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS","severity":"high","publishedAt":"2026-04-30T17:25:47.000Z","affected":["@jupyterlab/help-extension@<= 4.5.6 (fixed: 4.5.7)","jupyterlab@<= 4.5.6 (fixed: 4.5.7)","notebook@>= 7.0.0, <= 7.5.5 (fixed: 7.5.6)","@jupyter-notebook/help-extension@>= 7.0.0, <= 7.5.5 (fixed: 7.5.6)"],"epssScore":0.00663}],"checkedAt":"2026-10-10T00:09:18.954Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}