PatchTheCVEopen-notebook vulnerabilities and fixes
Recent CVEs affecting open-notebook, with upgrade or downgrade steps. 4 tracked.
Also searched as: open notebook.
open-notebook has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-07. Highest priority: CVE-2026-33587 (score 43/100).
- CVE-2026-33589 MEDIUM 6.5 UPGRADE Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application
- CVE-2026-33588 HIGH 8.1 UPGRADE Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application
- CVE-2026-33587 CRITICAL 10.0 UPGRADE Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (an
- CVE-2026-28201 HIGH 7.8 UPGRADE An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v
FAQ
How do I fix open-notebook vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open-notebook being exploited right now?
None of the tracked open-notebook CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open-notebook CVE should I patch first?
CVE-2026-33587 currently ranks highest (43/100): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (an.