Debian/jupyterlab: unknown
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyP
Action: Upgrade jupyterlab to 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 | - |
Fixed versions
| 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 |
Sources
- osv: DEBIAN-CVE-2026-67338#Debian:14/jupyterlab
- https://security-tracker.debian.org/tracker/CVE-2026-67338
published · modified · JSON