CVE-2026-102830

A vulnerability in JupyterLab (versions 3.0.0 through 4.5.11 and 4.6.4) and JupyterLite Core (0.8.3 and earlier) allows for the execution of arbitrary JavaScript. The root cause is a prefix-only regular-expression validation in the Plural-Forms header of certain third-party language packs, which ...