Debian/jupyterlab: high 7.5
JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install(). A missing 'await' caused the is_install_allowed coroutine to never exe
Action: Upgrade jupyterlab to 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 | - |
Fixed versions
| 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-4 |
Sources
- osv: DEBIAN-CVE-2026-73626#Debian:14/jupyterlab
- https://security-tracker.debian.org/tracker/CVE-2026-73626
published · modified · JSON