cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-73626 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

logodetect (1.1.3) potentially affected by CVE-2026-73626 via jupyterlab (3.2.4)

jupyterlab PYPI version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - logodetect 1.1.3 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

atacworks (>=0.3.0, <=0.3.2) potentially affected by CVE-2026-73626 via jupyterlab (2.1.4)

jupyterlab PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - atacworks =0.3.0, =0.3.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

junctionart (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-73626 via jupyterlab (2.2.6)

jupyterlab PYPI version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - junctionart =0.1.0, =0.1.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

jupyterlab-zip (>=0.1.1, <=1.0.1) potentially affected by CVE-2026-73626 via jupyterlab (0.35.0rc2)

jupyterlab PYPI version 0.35.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - jupyterlab-zip =0.1.1, =1.0.1 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

Not Failing Securely ('Failing Open')

Overview jupyterlab is a JupyterLab computational environment. Affected versions of this package are vulnerable to Not Failing Securely 'Failing Open' in the install function of PyPIExtensionManager when the allowlist/blocklist check is not properly enforced due to a missing await. An attacker ca...

confinedbrowniananalysis (>=1.0.1, <=1.0.3), hocmo (1.0.1) +3 more potentially affected by CVE-2026-73626 via jupyterlab (3.4.8)

jupyterlab PYPI version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - confinedbrowniananalysis =1.0.1, =0.2.10, =0.3.5 - retrolab 0.3.21 - wraplorenzmie 1.0.0 Source cves: CVE-2026-73626 Source advisory:...

coiled-runtime (>=0.2.0, <=0.2.1), here-search-demo (>=0.8.0, <=0.8.5) +5 more potentially affected by CVE-2026-73626 via jupyterlab (3.5.0)

jupyterlab PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - coiled-runtime =0.2.0, =0.8.0, =0.2.0b2, =1.0.0, =0.0.3, =1.0.0a20, =1.0.1, =1.0.1.6 Source cves: CVE-2026-73626 Source advisory:...

discretisedfield (>=0.8.14, <=0.11.1), micromagneticdata (>=0.3.2, <=0.5.1) +5 more potentially affected by CVE-2026-73626 via jupyterlab (2.2.0)

jupyterlab PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - discretisedfield =0.8.14, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.3.0, =0.2.0, =0.6.1 Source cves: CVE-2026-73626 Source advisory:...

omolab-conf-analysis (>=0.0.1, <=0.0.2) potentially affected by CVE-2026-73626 via jupyterlab (2.2.8)

jupyterlab PYPI version 2.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - omolab-conf-analysis =0.0.1, =0.0.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

elyra (>=2.0.0, <=3.0.0rc1), elyra-code-snippet-extension (>=2.2.0, <=3.0.0rc1) +11 more potentially affected by CVE-2026-73626 via jupyterlab (3.3.4)

jupyterlab PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra =2.0.0, =2.2.0, =2.2.0, =2.2.0, =2.2.0, =2.0.0, =0.1.1.10, =0.1.6.2, =0.0.1, =0.1.0, =0.0.13, =0.0.24 - retrolab 0.3.20 Source cves:...

scikit-rt (>=0.3.20, <=0.8.2), spatial-networks (>=0.0.4, <=0.0.7) potentially affected by CVE-2026-73626 via jupyterlab (3.4.5)

jupyterlab PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - scikit-rt =0.3.20, =0.0.4, =0.0.7 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +255 more potentially affected by CVE-2026-73626 via jupyterlab (>=4.0.0a25, <=4.5.8)

jupyterlab PYPI version =4.0.0a25, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =4.33.0, =0.6.4, =0.8.0, =1.0.1, =0.1.0, =0.5.0 and more Source cves: CVE-2026-73626 Source advisory: SNYK:PYTHON-JUPYTERLAB-18233207...

chronix2grid (>=0.1.0rc1, <=1.0.2), trenchripper (>=0.0.4, <=0.2.1) potentially affected by CVE-2026-73626 via jupyterlab (2.0.1)

jupyterlab PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - chronix2grid =0.1.0rc1, =0.0.4, =0.2.1 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

aalto-gpu (0.1.0), ballet-assemble (>=0.8.2, <=0.8.8) +41 more potentially affected by CVE-2026-73626 via jupyterlab (2.3.2)

jupyterlab PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - aalto-gpu 0.1.0 - ballet-assemble =0.8.2, =1.0.0rc1, =1.3.1, =1.3.1, =1.3.1, =1.3.1, =0.1.0, =0.0.2, =1.31.6, =0.1.0, =0.3.0, =0.3.0, =0.5.0...

a2 (>=0.1.0, <=0.6.1), aaa-ml-datasets-course (1.0.0) +255 more potentially affected by CVE-2026-73626 via jupyterlab (>=4.0.0a25, <=4.5.8)

jupyterlab PYPI version =4.0.0a25, =0.1.0, =0.1.0b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =2.0.0, =0.1.1, =4.33.0, =0.6.4, =0.8.0, =1.0.1, =0.1.0, =0.5.0 and more Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

eflow (0.1.3) potentially affected by CVE-2026-73626 via jupyterlab (1.1.4)

jupyterlab PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - eflow 0.1.3 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

vitamin-model-checker (>=0.2.0, <=1.5.0), vitamin-model-checker-test (>=0.8.0, <=1.0.0) potentially affected by CVE-2026-73626 via jupyterlab (3.4.7)

jupyterlab PYPI version 3.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - vitamin-model-checker =0.2.0, =0.8.0, =1.0.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

simo-omics (1.0.0), vdk-jupyterlab-extension (>=0.1.1148943518, <=0.1.1702830068) potentially affected by CVE-2026-73626 via jupyterlab (3.6.7)

jupyterlab PYPI version 3.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - simo-omics 1.0.0 - vdk-jupyterlab-extension =0.1.1148943518, =0.1.1702830068 Source cves: CVE-2026-73626 Source advisory:...

ai-test-designer (0.0.1), aquirdturtle-collapsible-headings (>=3.0.0, <=3.1.0) +262 more potentially affected by CVE-2026-73626 via jupyterlab (3.6.8)

jupyterlab PYPI version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ai-test-designer 0.0.1 - aquirdturtle-collapsible-headings =3.0.0, =0.1.0, =0.5.1, =1.0.0, =1.26.0, =1.0.2, =1.0.2, =1.0.1, =3.0.1, =0.1.0,...