eflow (0.1.3) potentially affected by CVE-2024-43805 via jupyterlab (1.1.4)

jupyterlab PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - eflow 0.1.3 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

atacworks (>=0.3.0, <=0.3.2) potentially affected by CVE-2024-43805 via jupyterlab (2.1.4)

jupyterlab PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks =0.3.0, =0.3.2 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

ibis-vega-transform (5.0.0) potentially affected by CVE-2024-43805 via jupyterlab (2.0.2)

jupyterlab PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 5.0.0 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

aalto-gpu (0.1.0), ballet-assemble (>=0.8.2, <=0.8.8) +41 more potentially affected by CVE-2024-43805 via jupyterlab (2.3.2)

jupyterlab PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - aalto-gpu 0.1.0 - ballet-assemble =0.8.2, =1.0.0rc1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =0.1.0, =0.0.2, =1.31.6, =0.1.0, =0.3.0, =0.3.0, =0.5.0...

mmtfpyspark (0.2.7) potentially affected by CVE-2024-43805 via jupyterlab (0.34.6)

jupyterlab PYPI version 0.34.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - mmtfpyspark 0.2.7 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

chronix2grid (>=0.1.0rc1, <=1.0.2), trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2024-43805 via jupyterlab (2.0.1)

jupyterlab PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - chronix2grid =0.1.0rc1, =0.0.4, =0.2.1 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

elyra (>=0.6.0, <=0.10.3), gcp-jupyterlab-shared (>=1.0.1, <=1.0.8) +5 more potentially affected by CVE-2024-43805 via jupyterlab (1.2.21)

jupyterlab PYPI version 1.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra =0.6.0, =1.0.1, =0.1.0, =1.0.1, =0.2.1, =0.1.0a16, =0.1.0a22 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

ml-medic-kit (>=0.1.9, <=0.2.1) potentially affected by CVE-2024-43805 via jupyterlab (1.2.6)

jupyterlab PYPI version 1.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ml-medic-kit =0.1.9, =0.2.1 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

jupyterlab-omnisci (0.9.0) potentially affected by CVE-2024-43805 via jupyterlab (1.0.0a3)

jupyterlab PYPI version 1.0.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-omnisci 0.9.0 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

scikit-blocks (0.0.1), scikit-lego (0.1.0) +1 more potentially affected by CVE-2024-43805 via jupyterlab (0.35.4)

jupyterlab PYPI version 0.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-blocks 0.0.1 - scikit-lego 0.1.0 - skillpub =0.2.41, =0.2.90 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-43805 via jupyterlab (2.2.8)

jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

jupyterlab-bookmarks-extension (>=0.5.2, <=0.5.6) potentially affected by CVE-2024-43805 via jupyterlab (2.2.10)

jupyterlab PYPI version 2.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-bookmarks-extension =0.5.2, =0.5.6 Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

aplusml (>=0.1.0, <=0.3.1), atacworks (0.3.4) +95 more potentially affected by CVE-2024-43805 via jupyterlab (>=3.0.0, <=3.6.7)

jupyterlab PYPI version =3.0.0, =0.1.0, =0.1.0, =1.3.5, =0.1.0, =0.1.0, =0.2.0, =1.0.1, =1.0.0, =3.2.0 - dimbridge 0.2.0 and more Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-2536...

ale-uy (1.5.0), autopilotml (>=1.0.1, <=1.0.14) +47 more potentially affected by CVE-2024-43805 via notebook (>=7.0.0, <=7.2.1)

notebook PYPI version =7.0.0, =1.0.1, =1.6.4b1, =0.0.1, =0.0.1, =0.0.2, =1.0.6, =1.0.0, =0.3.2, =0.0.1, =2.0.0.1, =2.0.0.2 and more Source cves: CVE-2024-43805 Source advisory: OSV:PYSEC-2026-1481...

Fedora: Security Advisory (FEDORA-2024-4b5f3d51ca)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : jupyterlab / python-notebook (2024-4b5f3d51ca)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-4b5f3d51ca advisory. Update jupyterlab and python-notebook to fix CVE-2024-43805. Tenable has extracted the preceding description block directly from the Fedora security advisory...

openSUSE Security Advisory (openSUSE-SU-2024:0352-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : python-jupyterlab (openSUSE-SU-2024:0352-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0352-1 advisory. - Build the full pacakge with the javascript dependencies as a new source in vendor.tar.gz. - CVE-2024-43805: Fixed data access via malicious Markdown du...

Security update for python-jupyterlab (moderate)

openSUSE Security Update: Security update for python-jupyterlab Announcement ID: openSUSE-SU-2024:0352-1 Rating: moderate References: 1229914 Cross-References: CVE-2024-43805 CVSS scores: CVE-2024-43805 SUSE: 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L Affected Products: openSUSE Backports...

Fedora: Security Advisory (FEDORA-2024-a3a82a256d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...