Lucene search
+L

7 matches found

EUVD
EUVD
•added 2026/10/01 3:21 p.m.•23 views

EUVD-2026-89459

JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs...

5.4CVSS5.8AI score0.00206EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/29 9:17 p.m.•16 views

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

5.4CVSS0.00206EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/09/29 9:17 p.m.•17 views

UBUNTU-CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

5.4CVSS6.3AI score0.00206EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2026/09/29 9:17 p.m.•15 views

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

5.4CVSS6.3AI score0.00206EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/09/29 8:47 p.m.•19 views

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

5.4CVSS6.3AI score0.00206EPSS
SaveExploits0
CVE
CVE
•added 2026/09/29 8:47 p.m.•25 views

CVE-2026-102904

In JupyterLab versions 4.0.0 through 4.5.11 and 4.6.4, an argument injection vulnerability exists in the PyPI Extension Manager . The ExtensionHandler.post method validates names for installation but fails to reject option-like values during uninstallation, passing them directly to PyPIExtensionM...

5.4CVSS6.3AI score0.00206EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•9 views

PT-2026-102922

Name of the Vulnerable Software and Affected Versions JupyterLab versions 4.0.0 through 4.5.10 JupyterLab versions 4.6.0 through 4.6.3 Description In the PyPI Extension Manager, the ExtensionHandler.post function validates extension names during installation but fails to reject option-like values...

5.4CVSS5.6AI score0.00206EPSS
SaveExploits0References20
Rows per page
Query Builder