Cross-site Scripting (XSS)

Overview @jupyterlab/apputils is a JupyterLab - Application Utilities Affected versions of this package are vulnerable to Cross-site Scripting XSS via the notebook paste action in packages/notebook/src/actions.tsx, which does not validate whether clipboard data originated from within the...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/apputils-extension (4.1.0-beta.0)

@jupyterlab/apputils-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/apputils-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@datalayer/jupyter-react (>=0.0.6, <=0.9.5), @fails-components/jupyter-applet-view (>=0.0.1-alpha.3, <=0.0.4) +21 more potentially affected by CVE-2026-42557 via @jupyterlab/apputils (>=4.0.0, <=4.5.10)

@jupyterlab/apputils NPM version =4.0.0, =0.0.6, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =7.1.0-rc.1, =7.1.0-rc.1, =7.1.0-rc.1, =7.1.0-rc.1, =7.1.0-rc.1, =7.1.0-rc.1, =0.2.0-alpha.0, =0.6.0-alpha.10, =0.6.0-alpha.10, =0.6.0-alpha.3, =0.6.0-alpha.9 and more Source cves:...