ibis-vega-transform (4.0.0), pangsitpy (0.0.3) +1 more potentially affected by CVE-2026-73415 via jupyterlab (2.0.0)

jupyterlab PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - ibis-vega-transform 4.0.0 - pangsitpy 0.0.3 - pyomu 0.2.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...