{"schema_version":"2","view":"grouped","data":[{"id":63305,"cve_ids":["CVE-2026-102831"],"payload":{"kind":"advisory","title":"JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard","summary":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affected because their output is sanitized. This issue is fixed in JupyterLab 4.5.11 and 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.","evidence":"cve:CVE-2026-102831","products":[{"name":{"value":"jupyterlab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"notebook","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"jupyterlite-core","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102831","aliases":["CVE-2026-102831"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"jupyterlab","product":"jupyterlab","versions":[{"status":"affected","version":">= 4.5.0, < 4.5.11"},{"status":"affected","version":">= 4.6.0, < 4.6.4"}]},{"vendor":"jupyterlab","product":"notebook","versions":[{"status":"affected","version":">= 7.5.0, < 7.6.3"}]},{"vendor":"jupyterlab","product":"jupyterlite-core","versions":[{"status":"affected","version":">= 0.7.0, < 0.8.4"}]}],"modified":"2026-10-02T12:22:58.664Z","provider":"cve","references":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-6966-vjj6-99xv","https://github.com/jupyterlab/jupyterlab/commit/1a10a7da5ff655849b21581c2633b46483ae0be9","https://github.com/jupyterlab/jupyterlab/commit/7f9f29e29e0c83fb17b0f11da57d06b3c6a40d96","https://github.com/jupyterlab/jupyterlab/commit/cf6e89a8d315c4134cefa50c220bca296da466a7","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102831","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-02T12:22:47.366494Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:22:58.664Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-29T18:58:03.634Z"}}},"related_cves":[{"value":"CVE-2026-102831","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:06a55e6c-2adb-42d9-ba76-6f2de535d8af","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-102831","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"jupyterlab","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.6.4","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"4.6.0","evidence":"/affected/0/versions"},{"value":"4.6.1","evidence":"/affected/0/versions"},{"value":"4.6.2","evidence":"/affected/0/versions"},{"value":"4.6.3","evidence":"/affected/0/versions"}]},{"name":{"value":"jupyterlab","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.11","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"4.5.0","evidence":"/affected/1/versions"},{"value":"4.5.1","evidence":"/affected/1/versions"},{"value":"4.5.10","evidence":"/affected/1/versions"},{"value":"4.5.2","evidence":"/affected/1/versions"},{"value":"4.5.3","evidence":"/affected/1/versions"},{"value":"4.5.4","evidence":"/affected/1/versions"},{"value":"4.5.5","evidence":"/affected/1/versions"},{"value":"4.5.6","evidence":"/affected/1/versions"},{"value":"4.5.7","evidence":"/affected/1/versions"},{"value":"4.5.8","evidence":"/affected/1/versions"},{"value":"4.5.9","evidence":"/affected/1/versions"}]},{"name":{"value":"notebook","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.6.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"7.5.0","evidence":"/affected/2/versions"},{"value":"7.5.1","evidence":"/affected/2/versions"},{"value":"7.5.2","evidence":"/affected/2/versions"},{"value":"7.5.3","evidence":"/affected/2/versions"},{"value":"7.5.4","evidence":"/affected/2/versions"},{"value":"7.5.5","evidence":"/affected/2/versions"},{"value":"7.5.6","evidence":"/affected/2/versions"},{"value":"7.5.7","evidence":"/affected/2/versions"},{"value":"7.6.0","evidence":"/affected/2/versions"},{"value":"7.6.0a0","evidence":"/affected/2/versions"},{"value":"7.6.0a1","evidence":"/affected/2/versions"},{"value":"7.6.0a2","evidence":"/affected/2/versions"},{"value":"7.6.0a3","evidence":"/affected/2/versions"},{"value":"7.6.0a4","evidence":"/affected/2/versions"},{"value":"7.6.0a5","evidence":"/affected/2/versions"},{"value":"7.6.0b0","evidence":"/affected/2/versions"},{"value":"7.6.0b1","evidence":"/affected/2/versions"},{"value":"7.6.0rc0","evidence":"/affected/2/versions"},{"value":"7.6.0rc1","evidence":"/affected/2/versions"},{"value":"7.6.1","evidence":"/affected/2/versions"},{"value":"7.6.2","evidence":"/affected/2/versions"}]},{"name":{"value":"jupyterlite","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/3/versions"},{"value":"0.7.1","evidence":"/affected/3/versions"},{"value":"0.7.2","evidence":"/affected/3/versions"},{"value":"0.7.3","evidence":"/affected/3/versions"},{"value":"0.7.4","evidence":"/affected/3/versions"},{"value":"0.7.5","evidence":"/affected/3/versions"},{"value":"0.7.6","evidence":"/affected/3/versions"},{"value":"0.8.0","evidence":"/affected/3/versions"},{"value":"0.8.0a0","evidence":"/affected/3/versions"},{"value":"0.8.0a1","evidence":"/affected/3/versions"},{"value":"0.8.0a2","evidence":"/affected/3/versions"},{"value":"0.8.0b0","evidence":"/affected/3/versions"},{"value":"0.8.0b1","evidence":"/affected/3/versions"},{"value":"0.8.0rc0","evidence":"/affected/3/versions"},{"value":"0.8.1","evidence":"/affected/3/versions"},{"value":"0.8.2","evidence":"/affected/3/versions"},{"value":"0.8.3","evidence":"/affected/3/versions"}]},{"name":{"value":"jupyterlite-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/4/versions"},{"value":"0.7.1","evidence":"/affected/4/versions"},{"value":"0.7.2","evidence":"/affected/4/versions"},{"value":"0.7.3","evidence":"/affected/4/versions"},{"value":"0.7.4","evidence":"/affected/4/versions"},{"value":"0.7.5","evidence":"/affected/4/versions"},{"value":"0.7.6","evidence":"/affected/4/versions"},{"value":"0.8.0","evidence":"/affected/4/versions"},{"value":"0.8.0a0","evidence":"/affected/4/versions"},{"value":"0.8.0a1","evidence":"/affected/4/versions"},{"value":"0.8.0a2","evidence":"/affected/4/versions"},{"value":"0.8.0b0","evidence":"/affected/4/versions"},{"value":"0.8.0b1","evidence":"/affected/4/versions"},{"value":"0.8.0rc0","evidence":"/affected/4/versions"},{"value":"0.8.1","evidence":"/affected/4/versions"},{"value":"0.8.2","evidence":"/affected/4/versions"},{"value":"0.8.3","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-6966-vjj6-99xv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-102831","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"notebook","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.6.3","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"7.5.0","evidence":"/affected/0/versions"},{"value":"7.5.1","evidence":"/affected/0/versions"},{"value":"7.5.2","evidence":"/affected/0/versions"},{"value":"7.5.3","evidence":"/affected/0/versions"},{"value":"7.5.4","evidence":"/affected/0/versions"},{"value":"7.5.5","evidence":"/affected/0/versions"},{"value":"7.5.6","evidence":"/affected/0/versions"},{"value":"7.5.7","evidence":"/affected/0/versions"},{"value":"7.5.8","evidence":"/affected/0/versions"},{"value":"7.6.0","evidence":"/affected/0/versions"},{"value":"7.6.0a0","evidence":"/affected/0/versions"},{"value":"7.6.0a1","evidence":"/affected/0/versions"},{"value":"7.6.0a2","evidence":"/affected/0/versions"},{"value":"7.6.0a3","evidence":"/affected/0/versions"},{"value":"7.6.0a4","evidence":"/affected/0/versions"},{"value":"7.6.0a5","evidence":"/affected/0/versions"},{"value":"7.6.0b0","evidence":"/affected/0/versions"},{"value":"7.6.0b1","evidence":"/affected/0/versions"},{"value":"7.6.0rc0","evidence":"/affected/0/versions"},{"value":"7.6.0rc1","evidence":"/affected/0/versions"},{"value":"7.6.1","evidence":"/affected/0/versions"},{"value":"7.6.2","evidence":"/affected/0/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/PYSEC-2026-4112","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102831","advisory_id":"06a55e6c-2adb-42d9-ba76-6f2de535d8af","event_types":["advisory"],"published_at":"2026-10-25T19:29:28.953907+00:00","technologies":["core-cve","jupyterlab","jupyterlite-core","notebook"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-29T18:58:03.634+00:00","detail_url":"/advisories/advisory%3A06a55e6c-2adb-42d9-ba76-6f2de535d8af","group":{"id":"advisory:06a55e6c-2adb-42d9-ba76-6f2de535d8af","revision":1,"primary_event_id":83665,"change":"published","superseded_by":[],"changed":{"id":62590,"cve_ids":["CVE-2026-102831"],"payload":{"kind":"advisory","title":"JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard","summary":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affected because their output is sanitized. This issue is fixed in JupyterLab 4.5.11 and 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.","evidence":"cve:CVE-2026-102831","products":[{"name":{"value":"jupyterlab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"notebook","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"jupyterlite-core","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102831","aliases":["CVE-2026-102831"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"jupyterlab","product":"jupyterlab","versions":[{"status":"affected","version":">= 4.5.0, < 4.5.11"},{"status":"affected","version":">= 4.6.0, < 4.6.4"}]},{"vendor":"jupyterlab","product":"notebook","versions":[{"status":"affected","version":">= 7.5.0, < 7.6.3"}]},{"vendor":"jupyterlab","product":"jupyterlite-core","versions":[{"status":"affected","version":">= 0.7.0, < 0.8.4"}]}],"modified":"2026-10-02T12:22:58.664Z","provider":"cve","references":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-6966-vjj6-99xv","https://github.com/jupyterlab/jupyterlab/commit/1a10a7da5ff655849b21581c2633b46483ae0be9","https://github.com/jupyterlab/jupyterlab/commit/7f9f29e29e0c83fb17b0f11da57d06b3c6a40d96","https://github.com/jupyterlab/jupyterlab/commit/cf6e89a8d315c4134cefa50c220bca296da466a7","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102831","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-02T12:22:47.366494Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:22:58.664Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-29T18:58:03.634Z"}}},"related_cves":[{"value":"CVE-2026-102831","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:06a55e6c-2adb-42d9-ba76-6f2de535d8af","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-102831","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"jupyterlab","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.6.4","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"4.6.0","evidence":"/affected/0/versions"},{"value":"4.6.1","evidence":"/affected/0/versions"},{"value":"4.6.2","evidence":"/affected/0/versions"},{"value":"4.6.3","evidence":"/affected/0/versions"}]},{"name":{"value":"jupyterlab","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.11","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"4.5.0","evidence":"/affected/1/versions"},{"value":"4.5.1","evidence":"/affected/1/versions"},{"value":"4.5.10","evidence":"/affected/1/versions"},{"value":"4.5.2","evidence":"/affected/1/versions"},{"value":"4.5.3","evidence":"/affected/1/versions"},{"value":"4.5.4","evidence":"/affected/1/versions"},{"value":"4.5.5","evidence":"/affected/1/versions"},{"value":"4.5.6","evidence":"/affected/1/versions"},{"value":"4.5.7","evidence":"/affected/1/versions"},{"value":"4.5.8","evidence":"/affected/1/versions"},{"value":"4.5.9","evidence":"/affected/1/versions"}]},{"name":{"value":"notebook","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.6.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"7.5.0","evidence":"/affected/2/versions"},{"value":"7.5.1","evidence":"/affected/2/versions"},{"value":"7.5.2","evidence":"/affected/2/versions"},{"value":"7.5.3","evidence":"/affected/2/versions"},{"value":"7.5.4","evidence":"/affected/2/versions"},{"value":"7.5.5","evidence":"/affected/2/versions"},{"value":"7.5.6","evidence":"/affected/2/versions"},{"value":"7.5.7","evidence":"/affected/2/versions"},{"value":"7.6.0","evidence":"/affected/2/versions"},{"value":"7.6.0a0","evidence":"/affected/2/versions"},{"value":"7.6.0a1","evidence":"/affected/2/versions"},{"value":"7.6.0a2","evidence":"/affected/2/versions"},{"value":"7.6.0a3","evidence":"/affected/2/versions"},{"value":"7.6.0a4","evidence":"/affected/2/versions"},{"value":"7.6.0a5","evidence":"/affected/2/versions"},{"value":"7.6.0b0","evidence":"/affected/2/versions"},{"value":"7.6.0b1","evidence":"/affected/2/versions"},{"value":"7.6.0rc0","evidence":"/affected/2/versions"},{"value":"7.6.0rc1","evidence":"/affected/2/versions"},{"value":"7.6.1","evidence":"/affected/2/versions"},{"value":"7.6.2","evidence":"/affected/2/versions"}]},{"name":{"value":"jupyterlite","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/3/versions"},{"value":"0.7.1","evidence":"/affected/3/versions"},{"value":"0.7.2","evidence":"/affected/3/versions"},{"value":"0.7.3","evidence":"/affected/3/versions"},{"value":"0.7.4","evidence":"/affected/3/versions"},{"value":"0.7.5","evidence":"/affected/3/versions"},{"value":"0.7.6","evidence":"/affected/3/versions"},{"value":"0.8.0","evidence":"/affected/3/versions"},{"value":"0.8.0a0","evidence":"/affected/3/versions"},{"value":"0.8.0a1","evidence":"/affected/3/versions"},{"value":"0.8.0a2","evidence":"/affected/3/versions"},{"value":"0.8.0b0","evidence":"/affected/3/versions"},{"value":"0.8.0b1","evidence":"/affected/3/versions"},{"value":"0.8.0rc0","evidence":"/affected/3/versions"},{"value":"0.8.1","evidence":"/affected/3/versions"},{"value":"0.8.2","evidence":"/affected/3/versions"},{"value":"0.8.3","evidence":"/affected/3/versions"}]},{"name":{"value":"jupyterlite-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/4/versions"},{"value":"0.7.1","evidence":"/affected/4/versions"},{"value":"0.7.2","evidence":"/affected/4/versions"},{"value":"0.7.3","evidence":"/affected/4/versions"},{"value":"0.7.4","evidence":"/affected/4/versions"},{"value":"0.7.5","evidence":"/affected/4/versions"},{"value":"0.7.6","evidence":"/affected/4/versions"},{"value":"0.8.0","evidence":"/affected/4/versions"},{"value":"0.8.0a0","evidence":"/affected/4/versions"},{"value":"0.8.0a1","evidence":"/affected/4/versions"},{"value":"0.8.0a2","evidence":"/affected/4/versions"},{"value":"0.8.0b0","evidence":"/affected/4/versions"},{"value":"0.8.0b1","evidence":"/affected/4/versions"},{"value":"0.8.0rc0","evidence":"/affected/4/versions"},{"value":"0.8.1","evidence":"/affected/4/versions"},{"value":"0.8.2","evidence":"/affected/4/versions"},{"value":"0.8.3","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-6966-vjj6-99xv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":2,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102831","advisory_id":"06a55e6c-2adb-42d9-ba76-6f2de535d8af","event_types":["advisory"],"published_at":"2026-10-25T19:29:28.953907+00:00","technologies":["core-cve","jupyterlab","jupyterlite-core","notebook"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-29T18:58:03.634+00:00","detail_url":"/events/62590"},"members":[{"id":83665,"cve_ids":["CVE-2026-102831"],"payload":{"kind":"advisory","title":"JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard","summary":"JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts attacker-controlled cell JSON without clearing metadata.trusted. When useSystemClipboardForCells is active and pasteCodeCellsWithoutOutput is disabled, a pasted code cell can mark HTML output as trusted, bypass output sanitization, and execute script in the authenticated JupyterLab origin without executing the cell. Markdown and raw cells are not affected because their output is sanitized. This issue is fixed in JupyterLab 4.5.11 and 4.6.4, Notebook 7.6.3, and JupyterLite Core 0.8.4.","evidence":"cve:CVE-2026-102831","products":[{"name":{"value":"jupyterlab","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"notebook","evidence":"/containers/cna/affected/1/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]},{"name":{"value":"jupyterlite-core","evidence":"/containers/cna/affected/2/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102831","aliases":["CVE-2026-102831"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"jupyterlab","product":"jupyterlab","versions":[{"status":"affected","version":">= 4.5.0, < 4.5.11"},{"status":"affected","version":">= 4.6.0, < 4.6.4"}]},{"vendor":"jupyterlab","product":"notebook","versions":[{"status":"affected","version":">= 7.5.0, < 7.6.3"}]},{"vendor":"jupyterlab","product":"jupyterlite-core","versions":[{"status":"affected","version":">= 0.7.0, < 0.8.4"}]}],"modified":"2026-10-02T12:22:58.664Z","provider":"cve","references":["https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-6966-vjj6-99xv","https://github.com/jupyterlab/jupyterlab/commit/1a10a7da5ff655849b21581c2633b46483ae0be9","https://github.com/jupyterlab/jupyterlab/commit/7f9f29e29e0c83fb17b0f11da57d06b3c6a40d96","https://github.com/jupyterlab/jupyterlab/commit/cf6e89a8d315c4134cefa50c220bca296da466a7","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.11","https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.4"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102831","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-02T12:22:47.366494Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-02T12:22:58.664Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-29T18:58:03.634Z"}}},"related_cves":[{"value":"CVE-2026-102831","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:06a55e6c-2adb-42d9-ba76-6f2de535d8af","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-102831","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"jupyterlab","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.6.4","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"4.6.0","evidence":"/affected/0/versions"},{"value":"4.6.1","evidence":"/affected/0/versions"},{"value":"4.6.2","evidence":"/affected/0/versions"},{"value":"4.6.3","evidence":"/affected/0/versions"}]},{"name":{"value":"jupyterlab","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"4.5.11","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"4.5.0","evidence":"/affected/1/versions"},{"value":"4.5.1","evidence":"/affected/1/versions"},{"value":"4.5.10","evidence":"/affected/1/versions"},{"value":"4.5.2","evidence":"/affected/1/versions"},{"value":"4.5.3","evidence":"/affected/1/versions"},{"value":"4.5.4","evidence":"/affected/1/versions"},{"value":"4.5.5","evidence":"/affected/1/versions"},{"value":"4.5.6","evidence":"/affected/1/versions"},{"value":"4.5.7","evidence":"/affected/1/versions"},{"value":"4.5.8","evidence":"/affected/1/versions"},{"value":"4.5.9","evidence":"/affected/1/versions"}]},{"name":{"value":"notebook","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.6.3","evidence":"/affected/2/ranges"}],"affected_versions":[{"value":"7.5.0","evidence":"/affected/2/versions"},{"value":"7.5.1","evidence":"/affected/2/versions"},{"value":"7.5.2","evidence":"/affected/2/versions"},{"value":"7.5.3","evidence":"/affected/2/versions"},{"value":"7.5.4","evidence":"/affected/2/versions"},{"value":"7.5.5","evidence":"/affected/2/versions"},{"value":"7.5.6","evidence":"/affected/2/versions"},{"value":"7.5.7","evidence":"/affected/2/versions"},{"value":"7.6.0","evidence":"/affected/2/versions"},{"value":"7.6.0a0","evidence":"/affected/2/versions"},{"value":"7.6.0a1","evidence":"/affected/2/versions"},{"value":"7.6.0a2","evidence":"/affected/2/versions"},{"value":"7.6.0a3","evidence":"/affected/2/versions"},{"value":"7.6.0a4","evidence":"/affected/2/versions"},{"value":"7.6.0a5","evidence":"/affected/2/versions"},{"value":"7.6.0b0","evidence":"/affected/2/versions"},{"value":"7.6.0b1","evidence":"/affected/2/versions"},{"value":"7.6.0rc0","evidence":"/affected/2/versions"},{"value":"7.6.0rc1","evidence":"/affected/2/versions"},{"value":"7.6.1","evidence":"/affected/2/versions"},{"value":"7.6.2","evidence":"/affected/2/versions"}]},{"name":{"value":"jupyterlite","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/3/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/3/versions"},{"value":"0.7.1","evidence":"/affected/3/versions"},{"value":"0.7.2","evidence":"/affected/3/versions"},{"value":"0.7.3","evidence":"/affected/3/versions"},{"value":"0.7.4","evidence":"/affected/3/versions"},{"value":"0.7.5","evidence":"/affected/3/versions"},{"value":"0.7.6","evidence":"/affected/3/versions"},{"value":"0.8.0","evidence":"/affected/3/versions"},{"value":"0.8.0a0","evidence":"/affected/3/versions"},{"value":"0.8.0a1","evidence":"/affected/3/versions"},{"value":"0.8.0a2","evidence":"/affected/3/versions"},{"value":"0.8.0b0","evidence":"/affected/3/versions"},{"value":"0.8.0b1","evidence":"/affected/3/versions"},{"value":"0.8.0rc0","evidence":"/affected/3/versions"},{"value":"0.8.1","evidence":"/affected/3/versions"},{"value":"0.8.2","evidence":"/affected/3/versions"},{"value":"0.8.3","evidence":"/affected/3/versions"}]},{"name":{"value":"jupyterlite-core","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.4","evidence":"/affected/4/ranges"}],"affected_versions":[{"value":"0.7.0","evidence":"/affected/4/versions"},{"value":"0.7.1","evidence":"/affected/4/versions"},{"value":"0.7.2","evidence":"/affected/4/versions"},{"value":"0.7.3","evidence":"/affected/4/versions"},{"value":"0.7.4","evidence":"/affected/4/versions"},{"value":"0.7.5","evidence":"/affected/4/versions"},{"value":"0.7.6","evidence":"/affected/4/versions"},{"value":"0.8.0","evidence":"/affected/4/versions"},{"value":"0.8.0a0","evidence":"/affected/4/versions"},{"value":"0.8.0a1","evidence":"/affected/4/versions"},{"value":"0.8.0a2","evidence":"/affected/4/versions"},{"value":"0.8.0b0","evidence":"/affected/4/versions"},{"value":"0.8.0b1","evidence":"/affected/4/versions"},{"value":"0.8.0rc0","evidence":"/affected/4/versions"},{"value":"0.8.1","evidence":"/affected/4/versions"},{"value":"0.8.2","evidence":"/affected/4/versions"},{"value":"0.8.3","evidence":"/affected/4/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/GHSA-6966-vjj6-99xv","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-102831","metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}],"products":[{"name":{"value":"notebook","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"7.6.3","evidence":"/affected/0/ranges"}],"affected_versions":[{"value":"7.5.0","evidence":"/affected/0/versions"},{"value":"7.5.1","evidence":"/affected/0/versions"},{"value":"7.5.2","evidence":"/affected/0/versions"},{"value":"7.5.3","evidence":"/affected/0/versions"},{"value":"7.5.4","evidence":"/affected/0/versions"},{"value":"7.5.5","evidence":"/affected/0/versions"},{"value":"7.5.6","evidence":"/affected/0/versions"},{"value":"7.5.7","evidence":"/affected/0/versions"},{"value":"7.5.8","evidence":"/affected/0/versions"},{"value":"7.6.0","evidence":"/affected/0/versions"},{"value":"7.6.0a0","evidence":"/affected/0/versions"},{"value":"7.6.0a1","evidence":"/affected/0/versions"},{"value":"7.6.0a2","evidence":"/affected/0/versions"},{"value":"7.6.0a3","evidence":"/affected/0/versions"},{"value":"7.6.0a4","evidence":"/affected/0/versions"},{"value":"7.6.0a5","evidence":"/affected/0/versions"},{"value":"7.6.0b0","evidence":"/affected/0/versions"},{"value":"7.6.0b1","evidence":"/affected/0/versions"},{"value":"7.6.0rc0","evidence":"/affected/0/versions"},{"value":"7.6.0rc1","evidence":"/affected/0/versions"},{"value":"7.6.1","evidence":"/affected/0/versions"},{"value":"7.6.2","evidence":"/affected/0/versions"}]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/PYSEC-2026-4112","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102831","advisory_id":"06a55e6c-2adb-42d9-ba76-6f2de535d8af","event_types":["advisory"],"published_at":"2026-10-26T21:34:24.558142+00:00","technologies":["core-cve","jupyterlab","jupyterlite-core","notebook"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-29T18:58:03.634+00:00","detail_url":"/events/83665"}]}}],"next_after":63305,"next_before":63305}