elvia-louvre-vision (>=0.0.3, <=0.9.0), image-crawl (0.1.0) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.1.4)

jupyterlab PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elvia-louvre-vision =0.0.3, =0.9.0 - image-crawl 0.1.0 - vimms 2.0.1 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

eflow (0.1.3) potentially affected by CVE-2026-40171 via jupyterlab (1.1.4)

jupyterlab PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - eflow 0.1.3 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +247 more potentially affected by CVE-2026-40171 via jupyterlab (>=4.0.0a25, <=4.5.6)

jupyterlab PYPI version =4.0.0a25, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =4.33.0, =0.6.4, =0.8.0, =1.0.1, =0.1.0, =1.6.4b1, =1.6.9b1 and more Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

crosscompute-analytics (0.9.4.9), db-classifier (0.0.2) +5 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.3)

jupyterlab PYPI version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - crosscompute-analytics 0.9.4.9 - db-classifier 0.0.2 - pysailingvlm =1.0.0, =8.6.5, =1.4.0, =0.1.1rc1, =0.1.1147938789 Source cves:...

xircuits (>=1.0.0, <=1.2.0) potentially affected by CVE-2026-40171 via jupyterlab (3.1.10)

jupyterlab PYPI version 3.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - xircuits =1.0.0, =1.2.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

atacworks (0.3.3), john-toolbox (>=0.1.0, <=0.3.1) potentially affected by CVE-2026-40171 via jupyterlab (2.1.5)

jupyterlab PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks 0.3.3 - john-toolbox =0.1.0, =0.3.1 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-40171 Source advisory:...

aalto-gpu (0.1.0), ballet-assemble (>=0.8.2, <=0.8.8) +41 more potentially affected by CVE-2026-40171 via jupyterlab (2.3.2)

jupyterlab PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - aalto-gpu 0.1.0 - ballet-assemble =0.8.2, =1.0.0rc1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =0.1.0, =0.0.2, =1.31.6, =0.1.0, =0.3.0, =0.3.0, =0.5.0...

jupyterlab-bookmarks-extension (>=0.5.2, <=0.5.6) potentially affected by CVE-2026-40171 via jupyterlab (2.2.10)

jupyterlab PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-bookmarks-extension =0.5.2, =0.5.6 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

xircuits (>=1.7.0, <=1.9.4) potentially affected by CVE-2026-40171 via jupyterlab (3.4.6)

jupyterlab PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - xircuits =1.7.0, =1.9.4 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

hbac-bias-detection (>=0.1.7, <=0.2.6) potentially affected by CVE-2026-40171 via jupyterlab (3.3.3)

jupyterlab PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - hbac-bias-detection =0.1.7, =0.2.6 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

dimbridge (0.2.0) potentially affected by CVE-2026-40171 via jupyterlab (3.0.0)

jupyterlab PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - dimbridge 0.2.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

pandorasat (0.5.9) potentially affected by CVE-2026-40171 via jupyterlab (3.1.0rc2)

jupyterlab PYPI version 3.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - pandorasat 0.5.9 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

elyra (>=0.6.0, <=0.10.3), gcp-jupyterlab-shared (>=1.0.1, <=1.0.8) +5 more potentially affected by CVE-2026-40171 via jupyterlab (1.2.21)

jupyterlab PYPI version 1.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra =0.6.0, =1.0.1, =0.1.0, =1.0.1, =0.2.1, =0.1.0a16, =0.1.0a22 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

jupyterlab-zip (>=0.1.1, <=1.0.1) potentially affected by CVE-2026-40171 via jupyterlab (0.35.0rc2)

jupyterlab PYPI version 0.35.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-zip =0.1.1, =1.0.1 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

discretisedfield (>=0.8.14, <=0.11.1), micromagneticdata (>=0.3.2, <=0.5.1) +5 more potentially affected by CVE-2026-40171 via jupyterlab (2.2.0)

jupyterlab PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - discretisedfield =0.8.14, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.3.0, =0.2.0, =0.6.1 Source cves: CVE-2026-40171 Source advisory:...

aaa-ml-datasets-course (1.0.0), ale-uy (1.5.0) +77 more potentially affected by CVE-2026-40171 via notebook (>=7.0.0, <=7.5.5)

notebook PYPI version =7.0.0, =1.0.1, =0.1.0, =1.6.4b1, =0.0.1, =0.3.1, =0.1.0, =0.0.1, =0.0.2, =1.0.6, =1.1.0 - credalabs-python-toolbox 0.1.1 - docualgo 0.4.2 and more Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2682...

mmtfpyspark (0.2.7) potentially affected by CVE-2026-40171 via jupyterlab (0.34.6)

jupyterlab PYPI version 0.34.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - mmtfpyspark 0.2.7 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

rlai (>=0.16.0, <=1.0.0) potentially affected by CVE-2026-40171 via jupyterlab (3.0.6)

jupyterlab PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - rlai =0.16.0, =1.0.0 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...