8.8
Élevée
CVE-2026-42266 JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
Description
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jupyterlab 4.0 | 4.0.0 → < 4.5.7 | 4.5.7 |
| Migration Toolkit for Applications 8 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat Migration Toolkit for Applications 8.2 1784109883 | premières → < 1784109883 | 1784109883 |
| Red Hat OpenShift AI 3.4 1787073593 | premières → < 1787073593 | 1787073593 |
Références
- github.com github.com
- github.com github.com
- jupyterhub.readthedocs.io jupyterhub.readthedocs.io
- jupyterlab.readthedocs.io jupyterlab.readthedocs.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de jupyterlab
Les 18 CVE de jupyterlab →
CVE-2026-102832
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
4.2
Moyenne
CVE-2026-102904
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
5.4
Moyenne
CVE-2026-102831
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
8.1
Élevée
CVE-2026-102830
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…
6.8
Moyenne