UnratedFix available

DEBIAN-CVE-2026-40171

Type: advisorySource: OSV1 source record

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with attacker-controlled notebook content to steal authentication tokens with a single click. An attacker can craft a malicious notebook file containing elements that appear indistinguishable from legitimate controls and trigger execution when a user interacts with them. Successful exploitation allows theft of the user's authentication token and complete takeover of the Jupyter session through the REST API, including reading files, creating or modifying files, accessing kernels to execute arbitrary code, and creating terminals for shell access. This issue has been fixed in Notebook 7.5.6, JupyterLab 4.5.7, @jupyter-notebook/help-extension 7.5.6, and @jupyterlab/help-extension 4.5.7. As a workaround, disable the affected help extensions or set allowCommandLinker to false in the sanitizer configuration.

Announced 6 May 2026Source revision 1

Original source ↗

DEBIAN-CVE-2026-40171

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:DEBIAN-CVE-2026-40171

jupyter-notebook

Source reference: /affected/0/package/name

Affected versions: 6.4.13-5
Source reference: /affected/0/versions
7.0.0-1
Source reference: /affected/0/versions
7.0.0-2
Source reference: /affected/0/versions
7.4.7-1
Source reference: /affected/0/versions
7.4.7-2
Source reference: /affected/0/versions
Fixed versions: 7.4.7-3
Source reference: /affected/0/ranges
Prerequisites: Not stated in this record

jupyterlab

Source reference: /affected/1/package/name

Affected versions: 4.0.11+ds1+~cs11.25.27-7
Source reference: /affected/1/versions
4.0.11+ds1+~cs11.25.27-8
Source reference: /affected/1/versions
4.0.11+ds1+~cs11.25.27-9
Source reference: /affected/1/versions
4.0.11+ds2+~cs11.25.27-1
Source reference: /affected/1/versions
4.0.11+ds2+~cs11.25.27-3
Source reference: /affected/1/versions
4.0.11+ds3+~cs11.25.27-1
Source reference: /affected/1/versions
4.0.11+ds4+~cs11.25.27-1
Source reference: /affected/1/versions
4.0.11+ds4+~cs11.25.27-2
Source reference: /affected/1/versions
4.0.11+ds4+~cs11.25.27-3
Source reference: /affected/1/versions
4.0.11+ds4+~cs11.25.27-4
Source reference: /affected/1/versions
4.0.11+ds5+~cs11.25.27-1
Source reference: /affected/1/versions
4.0.13+ds1+~2.0.1+~cs1.4.4-1
Source reference: /affected/1/versions
4.1.3+ds1+~2.0.1+~0.15.3+~cs1.4.4-1
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-1
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-2
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-3
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-4
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-5
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-6
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-7
Source reference: /affected/1/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-8
Source reference: /affected/1/versions
4.4.1+ds1+~3.0.5+~0.16.6+~cs1.4.4-1
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-1
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-2
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-5
Source reference: /affected/1/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-6
Source reference: /affected/1/versions
4.4.8+ds1+~3.1.0+~0.16.6+~cs1.4.4-1
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

jupyterlab

Source reference: /affected/2/package/name

Affected versions: 4.0.11+ds1+~cs11.25.27-7
Source reference: /affected/2/versions
4.0.11+ds1+~cs11.25.27-8
Source reference: /affected/2/versions
4.0.11+ds1+~cs11.25.27-9
Source reference: /affected/2/versions
4.0.11+ds2+~cs11.25.27-1
Source reference: /affected/2/versions
4.0.11+ds2+~cs11.25.27-3
Source reference: /affected/2/versions
4.0.11+ds3+~cs11.25.27-1
Source reference: /affected/2/versions
4.0.11+ds4+~cs11.25.27-1
Source reference: /affected/2/versions
4.0.11+ds4+~cs11.25.27-2
Source reference: /affected/2/versions
4.0.11+ds4+~cs11.25.27-3
Source reference: /affected/2/versions
4.0.11+ds4+~cs11.25.27-4
Source reference: /affected/2/versions
4.0.11+ds5+~cs11.25.27-1
Source reference: /affected/2/versions
4.0.13+ds1+~2.0.1+~cs1.4.4-1
Source reference: /affected/2/versions
4.1.3+ds1+~2.0.1+~0.15.3+~cs1.4.4-1
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-1
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-2
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-3
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-4
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-5
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-6
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-7
Source reference: /affected/2/versions
4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-8
Source reference: /affected/2/versions
4.4.1+ds1+~3.0.5+~0.16.6+~cs1.4.4-1
Source reference: /affected/2/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-1
Source reference: /affected/2/versions
4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-2
Source reference: /affected/2/versions
4.4.8+ds1+~3.1.0+~0.16.6+~cs1.4.4-1
Source reference: /affected/2/versions
Fixed versions: 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3
Source reference: /affected/2/ranges
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "7.4.7-3"
          }
        ]
      }
    ],
    "package": {
      "name": "jupyter-notebook",
      "purl": "pkg:deb/debian/jupyter-notebook?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "6.4.13-5",
      "7.0.0-1",
      "7.0.0-2",
      "7.4.7-1",
      "7.4.7-2"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-40171.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "jupyterlab",
      "purl": "pkg:deb/debian/jupyterlab?arch=source&distro=trixie",
      "ecosystem": "Debian:13"
    },
    "versions": [
      "4.0.11+ds1+~cs11.25.27-7",
      "4.0.11+ds1+~cs11.25.27-8",
      "4.0.11+ds1+~cs11.25.27-9",
      "4.0.11+ds2+~cs11.25.27-1",
      "4.0.11+ds2+~cs11.25.27-3",
      "4.0.11+ds3+~cs11.25.27-1",
      "4.0.11+ds4+~cs11.25.27-1",
      "4.0.11+ds4+~cs11.25.27-2",
      "4.0.11+ds4+~cs11.25.27-3",
      "4.0.11+ds4+~cs11.25.27-4",
      "4.0.11+ds5+~cs11.25.27-1",
      "4.0.13+ds1+~2.0.1+~cs1.4.4-1",
      "4.1.3+ds1+~2.0.1+~0.15.3+~cs1.4.4-1",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-1",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-2",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-3",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-4",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-5",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-6",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-7",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-8",
      "4.4.1+ds1+~3.0.5+~0.16.6+~cs1.4.4-1",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-1",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-2",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-5",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-6",
      "4.4.8+ds1+~3.1.0+~0.16.6+~cs1.4.4-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-40171.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3"
          }
        ]
      }
    ],
    "package": {
      "name": "jupyterlab",
      "purl": "pkg:deb/debian/jupyterlab?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "4.0.11+ds1+~cs11.25.27-7",
      "4.0.11+ds1+~cs11.25.27-8",
      "4.0.11+ds1+~cs11.25.27-9",
      "4.0.11+ds2+~cs11.25.27-1",
      "4.0.11+ds2+~cs11.25.27-3",
      "4.0.11+ds3+~cs11.25.27-1",
      "4.0.11+ds4+~cs11.25.27-1",
      "4.0.11+ds4+~cs11.25.27-2",
      "4.0.11+ds4+~cs11.25.27-3",
      "4.0.11+ds4+~cs11.25.27-4",
      "4.0.11+ds5+~cs11.25.27-1",
      "4.0.13+ds1+~2.0.1+~cs1.4.4-1",
      "4.1.3+ds1+~2.0.1+~0.15.3+~cs1.4.4-1",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-1",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-2",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-3",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-4",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-5",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-6",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-7",
      "4.1.8+ds1+~2.0.1+~0.15.3+~cs1.4.4-8",
      "4.4.1+ds1+~3.0.5+~0.16.6+~cs1.4.4-1",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-1",
      "4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-2",
      "4.4.8+ds1+~3.1.0+~0.16.6+~cs1.4.4-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-40171.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #55997 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 16:17:11 GMT
Publisher date: Wed, 06 May 2026 20:16:31 GMT

Read the original announcement