Debian/jupyterlab: high 8.8
systeminformation is a System and OS information library for node.js. Versions prior to 5.31.0 are vulnerable to command injection via unsanitized `locate` output in `versions()`. Version 5.31.0 fixes
Action: Upgrade jupyterlab to 4.0.11+ds5+~cs11.25.27-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.11+ds5+~cs11.25.27-1 | - |
Fixed versions
| 4.0.11+ds5+~cs11.25.27-1 |
Sources
- osv: DEBIAN-CVE-2026-26318#Debian:14/jupyterlab
- https://security-tracker.debian.org/tracker/CVE-2026-26318
published · modified · JSON