Skip to content
fr Sign in
8.8 High

CVE-2026-42266 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…

Description

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.

Affected products and versions

Product Affected versions Fixed in
jupyterlab 4.0 4.0.0 → < 4.5.7 4.5.7
Migration Toolkit for Applications 8 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Migration Toolkit for Applications 8.2 1784109883 earliest → < 1784109883 1784109883
Red Hat OpenShift AI 3.4 1787073593 earliest → < 1787073593 1787073593

References

Timeline

  1. Published
  2. Last modified

Other CVEs of jupyterlab

The 18 CVEs of jupyterlab →
CVE-2026-102832 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 4.2 Medium CVE-2026-102904 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 5.4 Medium CVE-2026-102831 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 8.1 High CVE-2026-102830 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook… 6.8 Medium
Track this CVE