@datalayer/jupyter-react (>=0.0.6 <=0.9.5), @mrawdon/jupyter-react (>=0.0.23 <=0.0.32) potentially affected by CVE-2026-42557 via @jupyterlab/rendermime-extension (>=4.0.0-alpha.11 <=4.1.0-beta.0)

@jupyterlab/rendermime-extension NPM version =4.0.0-alpha.11, =0.0.6, =0.0.23, =0.0.32 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABRENDERMIMEEXTENSION-16438958...

@datalayer/jupyter-react (>=0.0.6 <=0.9.5), @jupyter-notebook/application-extension (>=7.1.0 <=7.4.7) +3 more potentially affected by CVE-2026-42557 via @jupyterlab/rendermime (>=4.0.0-alpha.11 <=4.4.10)

@jupyterlab/rendermime NPM version =4.0.0-alpha.11, =0.0.6, =7.1.0, =0.0.23, =1.29.0, =1.30.0-rc1 Source cves: CVE-2026-42557 Source advisory: SNYK:JS-JUPYTERLABRENDERMIME-16438960...

@datalayer/jupyter-react (=0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/markdownviewer-extension (=4.1.0-beta.0)

@jupyterlab/markdownviewer-extension NPM version =4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/markdownviewer-extension and may be impacted: - @datalayer/jupyter-react =0.9.5 Source cves: CVE-2026-42557 Source advisory:...

@datalayer/jupyter-react (=0.9.5) potentially affected by CVE-2026-42557 via @jupyterlab/notebook-extension (=4.1.0-beta.0)

@jupyterlab/notebook-extension NPM version =4.1.0-beta.0 is affected by a known vulnerability. The following packages have a transitive dependency on @jupyterlab/notebook-extension and may be impacted: - @datalayer/jupyter-react =0.9.5 Source cves: CVE-2026-42557 Source advisory:...