CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

a2 (>=0.1.0 <=0.3.17), aerocm (>=0.1.1b0 <=0.2.0b0) +187 more potentially affected by CVE-2024-43805 via jupyterlab (>=4.0.0 <=4.2.4)

jupyterlab PYPI version =4.0.0, =0.1.0, =0.1.1b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.5.5, =0.1.1, =0.6.4, =0.8.0, =1.0.1, =1.6.4, =0.0.1, =0.0.4a0, =0.2.2, =0.0.1, =0.0.8.post4 and more Source cves: CVE-2024-43805 Source advisory: OSV:GHSA-9Q39-RMJ3-P4R2...

a2 (>=0.1.0 <=0.3.17), aerocm (>=0.1.1b0 <=0.2.0b0) +114 more potentially affected by CVE-2024-22420 via jupyterlab (>=4.0.0 <=4.0.10)

jupyterlab PYPI version =4.0.0, =0.1.0, =0.1.1b0, =0.1.0b0, =0.1.0b0, =0.1.0, =0.1.1, =0.6.4, =0.8.0, =0.0.4a0, =0.2.2, =0.26.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.2.4 and more Source cves: CVE-2024-22420 Source advisory: OSV:GHSA-4M77-CMPX-VJC4...

atacworks (>=0.3.0 <=0.3.3), chronix2grid (>=0.1.0rc1 <=1.0.2) +11 more potentially affected by CVE-2021-32797 via jupyterlab (>=2.0.1 <=2.2.1)

jupyterlab PYPI version =2.0.1, =0.3.0, =0.1.0rc1, =0.8.14, =0.1.0, =0.3.2, =0.8.22, =0.1.6, =0.8.25, =0.0.4, =0.3.0, =0.2.0, =0.0.4, =0.0.14 Source cves: CVE-2021-32797 Source advisory: OSV:GHSA-4952-P58Q-6CRX...

jupyterlab-scheduler (>=0.1.4 <=0.1.5), jupyterlab-unfold (>=0.1.0 <=0.1.2) +2 more potentially affected by CVE-2021-32797 via jupyterlab (>=3.1.0a10 <=3.1.19)

jupyterlab PYPI version =3.1.0a10, =0.1.4, =0.1.0, =1.0.0, =1.2.0 Source cves: CVE-2021-32797 Source advisory: OSV:PYSEC-2021-130...