Linux Distros Unpatched Vulnerability : CVE-2026-73626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab versions =4.6.0,=4.6.1 and =4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install. A missing 'await' caused the...

CVE-2026-73626

creationtimestamp| type| source ---|---|--- 2026-08-13 12:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cdvs2ljzsbbrs...

CVE-2026-73626

JupyterLab versions =4.6.0,=4.6.1 and =4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install. A missing 'await' caused the isinstallallowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install. The sto...

CVE-2026-73626

JupyterLab versions =4.6.0,=4.6.1 and =4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install. A missing 'await' caused the isinstallallowed coroutine to never execute, so the extension allowlist/blocklist check was not enforced for direct callers of install. The sto...

CVE-2026-73626

CVE-2026-73626 is a HIGH severity (CVSS 3.1: 7.5) vulnerability in JupyterLab versions >=4.6.0, <=4.6.1 and

rlai (>=0.16.0, <=1.0.0) potentially affected by CVE-2026-73626 via jupyterlab (3.0.6)

jupyterlab PYPI version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - rlai =0.16.0, =1.0.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

jupyterlab-stickyland (0.2.3) potentially affected by CVE-2026-73626 via jupyterlab (3.6.4)

jupyterlab PYPI version 3.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-stickyland 0.2.3 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

jupyterlab-scheduler (>=0.1.4, <=0.1.5) potentially affected by CVE-2026-73626 via jupyterlab (3.1.19)

jupyterlab PYPI version 3.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-scheduler =0.1.4, =0.1.5 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

xircuits (>=1.7.0, <=1.9.4) potentially affected by CVE-2026-73626 via jupyterlab (3.4.6)

jupyterlab PYPI version 3.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - xircuits =1.7.0, =1.9.4 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

elyra-code-snippet-extension (>=3.14.0, <=3.14.1), elyra-code-viewer-extension (>=3.14.0, <=3.14.1) +9 more potentially affected by CVE-2026-73626 via jupyterlab (3.5.3)

jupyterlab PYPI version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra-code-snippet-extension =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =0.0.7, =0.1.2, =0.0.1, =0.1.0, =0.0.2, =0.0.3 Source cve...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-73626 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

confinedbrowniananalysis (>=1.0.1, <=1.0.3), hocmo (1.0.1) +3 more potentially affected by CVE-2026-73626 via jupyterlab (3.4.8)

jupyterlab PYPI version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - confinedbrowniananalysis =1.0.1, =0.2.10, =0.3.5 - retrolab 0.3.21 - wraplorenzmie 1.0.0 Source cves: CVE-2026-73626 Source advisory:...

coiled-runtime (>=0.2.0, <=0.2.1), here-search-demo (>=0.8.0, <=0.8.5) +5 more potentially affected by CVE-2026-73626 via jupyterlab (3.5.0)

jupyterlab PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.2.0, =0.8.0, =0.2.0b2, =1.0.0, =0.0.3, =1.0.0a20, =1.0.1, =1.0.1.6 Source cves: CVE-2026-73626 Source advisory:...

dcicwrangling (>=1.0.0, <=3.2.0) potentially affected by CVE-2026-73626 via jupyterlab (3.2.8)

jupyterlab PYPI version 3.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - dcicwrangling =1.0.0, =3.2.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

jupyterlab-unfold (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-73626 via jupyterlab (3.1.0a10)

jupyterlab PYPI version 3.1.0a10 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-unfold =0.1.0, =0.1.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

pandorasat (0.5.9) potentially affected by CVE-2026-73626 via jupyterlab (3.1.0rc2)

jupyterlab PYPI version 3.1.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - pandorasat 0.5.9 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

discretisedfield (>=0.8.14, <=0.11.1), micromagneticdata (>=0.3.2, <=0.5.1) +5 more potentially affected by CVE-2026-73626 via jupyterlab (2.2.0)

jupyterlab PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - discretisedfield =0.8.14, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.3.0, =0.2.0, =0.6.1 Source cves: CVE-2026-73626 Source advisory:...

elyra (>=2.0.0, <=3.0.0rc1), elyra-code-snippet-extension (>=2.2.0, <=3.0.0rc1) +11 more potentially affected by CVE-2026-73626 via jupyterlab (3.3.4)

jupyterlab PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra =2.0.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =0.1.1.10, =0.1.6.2, =0.0.1, =0.1.0, =0.0.13, =0.0.24 - retrolab 0.3.20 Source cves:...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +255 more potentially affected by CVE-2026-73626 via jupyterlab (>=4.0.0a25, <=4.5.8)

jupyterlab PYPI version =4.0.0a25, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =4.33.0, =0.6.4, =0.8.0, =1.0.1, =0.1.0, =0.5.0 and more Source cves: CVE-2026-73626 Source advisory: SNYK:PYTHON-JUPYTERLAB-18233207...

scikit-blocks (0.0.1), scikit-lego (0.1.0) +1 more potentially affected by CVE-2026-73626 via jupyterlab (0.35.4)

jupyterlab PYPI version 0.35.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-blocks 0.0.1 - scikit-lego 0.1.0 - skillpub =0.2.41, =0.2.90 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...