CVE-2026-42557 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips...

CVE-2026-42557

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all cli...

Jupyter Notebook Python Library 7.0.0 < 7.5.6 (CVE-2026-42557)

Jupyter Notebook is an extensible environment for interactive and reproducible computing. The version of Jupyter Notebook installed on the remote host is 7.0.0 prior to 7.5.6. It is, therefore, affected by a vulnerability: - JupyterLab's command linker attributes in HTML enable one-click command...

@datalayer/jupyter-react (>=0.0.6, <=0.9.5), @jupyter-notebook/application (>=7.1.0-alpha.0, <=7.4.7) +7 more potentially affected by CVE-2026-42557 via @jupyterlab/rendermime-interfaces (>=3.1.18, <=3.12.10)

@jupyterlab/rendermime-interfaces NPM version =3.1.18, =0.0.6, =7.1.0-alpha.0, =0.1.0-alpha.23, =0.1.0-alpha.7, =0.3.0-alpha.0, =0.1.0-alpha.23, =0.0.23, =0.2.0-alpha.0, =0.1.1, =0.2.2 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABRENDERMIMEINTERFACES-16438959...

@datalayer/jupyter-react (>=0.0.6, <=0.9.5), @mrawdon/jupyter-react (>=0.0.23, <=0.0.32) potentially affected by CVE-2026-42557 via @jupyterlab/rendermime-extension (>=4.0.0, <=4.1.0-beta.0)

@jupyterlab/rendermime-extension NPM version =4.0.0, =0.0.6, =0.0.23, =0.0.32 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABRENDERMIMEEXTENSION-16438958...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/notebook-extension (4.1.0-beta.0)

@jupyterlab/notebook-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/notebook-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/apputils-extension (4.1.0-beta.0)

@jupyterlab/apputils-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/apputils-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@datalayer/jupyter-react (0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/markdownviewer-extension (4.1.0-beta.0)

@jupyterlab/markdownviewer-extension NPM version 4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/markdownviewer-extension and may be impacted: - @datalayer/jupyter-react 0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@fails-components/jupyter-applet-view (>=0.0.1-alpha.3, <=0.0.1-alpha.18), @fails-components/jupyter-filesystem-extension (>=0.0.1-alpha.3, <=0.0.1-alpha.18) +3 more potentially affected by CVE-2026-42557 via @jupyterlab/help-extension (>=4.0.13, <=4.4.10)

@jupyterlab/help-extension NPM version =4.0.13, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.0.1-alpha.3, =0.2.0-alpha.0, =0.6.0-alpha.9 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABHELPEXTENSION-16438961...