Executive brief
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Affected products
- PyPI jupyter-notebook
- PyPI notebook
Junglewise Threat Intelligence
CVE-2019-9644: PYSEC-2026-2531 - Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
CVE-2019-9644 · Severity: low · CVSS 3 · Published 2026-07-09
Technologies: notebook (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-2682 - Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
- PYSEC-2026-2536 - HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
- PYSEC-2026-2534 - JupyterLab vulnerable to potential authentication and CSRF tokens leak
- PYSEC-2026-2535 - JupyterLab vulnerable to SXSS in Markdown Preview
- PYSEC-2026-688 - JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>