Debian/jupyterlab: high 8.1
systeminformation is a System and OS information library for node.js. In versions prior to 5.27.14, the `fsSize()` function in systeminformation is vulnerable to OS command injection on Windows system
Action: Upgrade jupyterlab to 4.0.11+ds5+~cs11.25.27-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.11+ds5+~cs11.25.27-1 | - |
Fixed versions
| 4.0.11+ds5+~cs11.25.27-1 |
Sources
- osv: DEBIAN-CVE-2025-68154#Debian:14/jupyterlab
- https://security-tracker.debian.org/tracker/CVE-2025-68154
published · modified · JSON