Cross-site Scripting (XSS)

Overview @jupyterlab/rendermime-interfaces is a JupyterLab - Interfaces for Mime Renderers Affected versions of this package are vulnerable to Cross-site Scripting XSS via the handling of data-commandlinker-command and data-commandlinker-args attributes in HTML content. An attacker can execute...

@aarnet/jupyterlab-ext-aarnet-help (>=0.1.0, <=3.0.2), @aarnet/jupyterlab-ext-changeconf (>=0.1.0, <=3.0.0) +1677 more potentially affected by CVE-2025-59842 via @jupyterlab/rendermime-interfaces (>=0.2.1, <=4.0.0-alpha.9)

@jupyterlab/rendermime-interfaces NPM version =0.2.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.19.1-rc.2, =0.19.1-rc.3, =0.1.1, =0.0.1, =0.2.0-a0, =0.1.0, =0.1.0, =0.2.0, =0.3.10 and more Source cves: CVE-2025-59842 Source advisory: MEND:CVE-2025-59842...