Jupyter vulnerabilities and fixes

CVEs that mention Jupyter, ranked by priority. 3 tracked.

Jupyter has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-10-21. Highest priority: CVE-2026-114135 (score 39/100).

• CVE-2026-114135 HIGH 8.8 Jupyter Server is the backend for Jupyter web applications
• CVE-2026-114140 HIGH 8.8 The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates
• CVE-2026-75060 HIGH 8.4 UPGRADE In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools

FAQ

How do I fix Jupyter vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Jupyter being exploited right now?

None of the tracked Jupyter CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Jupyter CVE should I patch first?

CVE-2026-114135 currently ranks highest (39/100): Jupyter Server is the backend for Jupyter web applications.

← Back to latest CVEs