voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-86049 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-86049 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-86049 Source advisory:...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2026-86049 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2026-86049 Source advisory: OSV:PYSEC-2026-4054...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-86049 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-86049 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-86049 Source advisory:...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2026-86049 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2026-86049 Source advisory: OSV:GHSA-C3MW-737P-C7G2...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-5422 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2026-5422 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2026-5422 Source advisory: OSV:PYSEC-2026-2532...

voila (>=0.2.0a2, <=0.2.0a3), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2025-53000 via nbconvert (6.0.0a6)

nbconvert PYPI version 6.0.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

voila (>=0.2.0a0, <=0.2.0a1), voila-gridstack (0.1.0a2) potentially affected by CVE-2025-53000 via nbconvert (6.0.0a3)

nbconvert PYPI version 6.0.0a3 is affected by a known vulnerability. The following packages have a transitive dependency on nbconvert and may be impacted: - voila =0.2.0a0, =0.2.0a1 - voila-gridstack 0.1.0a2 Source cves: CVE-2025-53000 Source advisory: OSV:PYSEC-2026-1691...

PYSEC-2026-2027 Voilà Local file inclusion

Impact Any deployment of voilà dashboard allow local file inclusion, that is to say any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how...

aepsych (>=0.3.0, <=0.4.0), environmentfinder (>=1.1.3, <=1.1.4) +4 more potentially affected by CVE-2024-30265 via voila (>=0.3.0rc0, <=0.3.7)

voila PYPI version =0.3.0rc0, =0.3.0, =1.1.3, =0.1.0, =0.0.0, =0.1.0 - voila-vuetify 0.5.2 Source cves: CVE-2024-30265 Source advisory: OSV:PYSEC-2026-2027...

asiva (>=1.0.1, <=1.3.1), loci-st (0.1.0) +9 more potentially affected by CVE-2024-30265 via voila (>=0.1.24, <=0.2.10)

voila PYPI version =0.1.24, =1.0.1, =0.2.1, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0a4 - voila-sourcemaps 0.2.4 Source cves: CVE-2024-30265 Source advisory: OSV:PYSEC-2026-2027...

aeroscope (>=0.1.0b0, <=0.2.5b0), nemoview (>=0.1.0, <=0.2.2) +9 more potentially affected by CVE-2024-30265 via voila (0.4.0)

voila PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on voila and may be impacted: - aeroscope =0.1.0b0, =0.1.0, =2.2.6, =2.3.0, =1.0.0, =1.0.0, =1.8.2, =1.0.0, =1.0.0, =1.0.0, =1.5.2, =1.6.3 Source cves: CVE-2024-30265 Source advisory...

groundingmeasurementapplication (>=0.0.1, <=0.0.2), voici (>=0.4.5, <=0.4.6) +1 more potentially affected by CVE-2024-30265 via voila (>=0.5.0a4, <=0.5.5)

voila PYPI version =0.5.0a4, =0.0.1, =0.4.5, =0.4.6 - voila-sepal-ui 0.5.0 Source cves: CVE-2024-30265 Source advisory: OSV:PYSEC-2026-2027...

Voilà Local file inclusion

ImpactAny deployment of voilà dashboard allow local file inclusion, that is to say any file on a filesystem that is readable by the user that runs the voilà dashboard server can be downloaded by someone with network access to the server. Whether this still requires authentication depends on how...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-44727 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-44727 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-44727 Source advisory:...

voila (>=0.2.0a2, <=0.2.2), voila-gridstack (>=0.1.0a3, <=0.1.0a5) +1 more potentially affected by CVE-2026-44727 via jupyter-server (0.3.0)

jupyter-server PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.2.0a2, =0.1.0a3, =0.1.0a1, =0.1.0a4 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-44727 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...