AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

notebook

Jupyter Notebook - A web-based notebook environment for interactive computing

Does not declare an LLM SDK itself, but depends on a package that does, 3 steps away.

PyPILatest 7.6.3First release 2015-07-30Registry page RepositoryChecked 2026-10-10

Advisories

Advisories that name notebook as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.

Advisory	Severity	Affected	Fixed in	Published
CVE-2026-40171GHSA-rch3-82jr-f9w9: Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS	High	>= 7.0.0, <= 7.5.5	7.5.6	2026-04-30

How it reaches an LLM package

Shortest path through the runtime dependencies of each latest release.

Dependencies of the latest release

As declared in PyPI metadata for version 7.6.3. Optional extras are listed with their extra name.

jupyterlabreaches LLM
pydata-sphinx-theme[docs]reaches LLM
ipykernel[test]reaches LLM
jupyterlab-serverreaches LLM
jupyter-serverreaches LLM
myst-parser[docs]reaches LLM
pytest[test]reaches LLM
jupyter-builderreaches LLM
nbsphinx[docs]reaches LLM
nbval[test]reaches LLM
notebook-shimreaches LLM
pytest-console-scripts[test]reaches LLM
pytest-timeout[test]reaches LLM
pytest-tornasync[test]reaches LLM
requests[test]reaches LLM
sphinxcontrib-spelling[docs]reaches LLM
hatch[dev]reaches LLM
sphinx[docs]reaches LLM
pre-commit[dev]
sphinxcontrib-github-alt[docs]
tornado

Tracked packages that depend on it

Among the packages in the registry; not every dependent on PyPI.