7.6
Élevée
CVE-2024-22421 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and…
Description
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. Users of JupyterLab who click on a malicious link may get their `Authorization` and `XSRFToken` tokens exposed to a third party when running an older `jupyter-server` version. JupyterLab versions 4.1.0b2, 4.0.11, and 3.6.7 are patched. No workaround has been identified, however users should ensure to upgrade `jupyter-server` to version 2.7.2 or newer which includes a redirect vulnerability fix.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jupyterlab 4.0 | 4.0.0 → < 4.0.11 | 4.0.11 |
| jupyterlab 3.6 | premières → < 3.6.7 | 3.6.7 |
Références
- github.com github.com
- github.com github.com
- lists.fedoraproject.org lists.fedoraproject.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de jupyterlab
Les 18 CVE de jupyterlab →
CVE-2026-102832
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
4.2
Moyenne
CVE-2026-102904
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
5.4
Moyenne
CVE-2026-102831
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
8.1
Élevée
CVE-2026-102830
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
6.8
Moyenne