Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the CommandLinker trust mechanism, where a command-link click triggers a trust dialog and, upon user approval, executes the associated trust command without verifying that the DOM...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: OSV:PYSEC-2026-4060...

andeplane-pyodide-kernel (>=0.0.7, <=0.0.12), here-search-demo (>=0.9.0, <=0.9.1) +17 more potentially affected by CVE-2026-102830 via jupyterlite-core (>=0.1.2, <=0.8.0rc0)

jupyterlite-core PYPI version =0.1.2, =0.0.7, =0.9.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.1, =0.10.0, =0.2.1, =0.5.0, =0.1.0a4, =0.9.6, =0.1.0, =0.5.2 and more Source cves: CVE-2026-102830 Source advisory: OSV:PYSEC-2026-4059...

andeplane-pyodide-kernel (>=0.0.7, <=0.0.12), here-search-demo (>=0.9.0, <=0.9.1) +17 more potentially affected by CVE-2026-102830 via jupyterlite-core (>=0.1.2, <=0.8.0rc0)

jupyterlite-core PYPI version =0.1.2, =0.0.7, =0.9.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.1, =0.10.0, =0.2.1, =0.5.0, =0.1.0a4, =0.9.6, =0.1.0, =0.5.2 and more Source cves: CVE-2026-102830 Source advisory: OSV:GHSA-3JQQ-PW4J-PQCJ...

EUVD-2026-89337

JupyterLab: Cross-site scripting XSS in JupyterLab via crafted language package jupyterlab.json...

andeplane-pyodide-kernel (>=0.0.7, <=0.0.12), here-search-demo (>=0.9.0, <=0.9.1) +17 more potentially affected by CVE-2026-102830 via jupyterlite-core (>=0.1.2, <=0.8.0rc0)

jupyterlite-core PYPI version =0.1.2, =0.0.7, =0.9.0, =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.1, =0.10.0, =0.2.1, =0.5.0, =0.1.0a4, =0.9.6, =0.1.0, =0.5.2 and more Source cves: CVE-2026-102830 Source advisory: GHSA-3JQQ-PW4J-PQCJ...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: GHSA-6966-VJJ6-99XV...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: OSV:GHSA-6966-VJJ6-99XV...

SUSE CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

SUSE CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

Linux Distros Unpatched Vulnerability : CVE-2026-102831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5....

Linux Distros Unpatched Vulnerability : CVE-2026-102830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5....

DEBIAN-CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

DEBIAN-CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

UBUNTU-CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-102830

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-102831

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.5.0 until 4.5.11 and 4.6.4, from Notebook 7.5.0 until 7.6.3, and from JupyterLite Core 0.7.0 until 0.8.4, the system clipboard cell-paste path accepts...

jupyterlite-pyodide-kernel (>=0.7.0a0, <=0.7.2), jupyterlite-sphinx (>=0.22.0, <=0.22.1) +5 more potentially affected by CVE-2026-102831 via jupyterlite-core (>=0.7.6, <=0.8.0rc0)

jupyterlite-core PYPI version =0.7.6, =0.7.0a0, =0.22.0, =1.0.1, =4.2.0, =0.3.0, =0.6.0, =0.10.0a0, =0.10.0 Source cves: CVE-2026-102831 Source advisory: MEND:CVE-2026-102831...