CVE-2026-102832

The JupyterLab environment (versions 4.5.7 to 4.5.11 and 4.6.4) contains a logic flaw in the markdownviewer:trust and notebook:trust command-link handlers. The root cause is the use of tracker.currentWidget to resolve the target document when a user interacts with a trust prompt, rather than reta...