{"action":"Upgrade jupyterlab to 4.4.8 or later.","affected":[{"fixed":"4.4.8","introduced":"0"}],"component":"jupyterlab","cve_ids":["CVE-2025-59842"],"ecosystem":"PyPI","epss":0.0024,"exploited":false,"fixed_versions":["4.4.8"],"ghsa_id":"GHSA-vvfj-2jqx-52jm","id":"tcs_01M5KG0WWFGF1KHA8YYYFVRR2Q","modified_at":"2026-09-10T03:50:28.901132283Z","published_at":"2025-09-26T14:26:40Z","references":["https://osv.dev/vulnerability/GHSA-vvfj-2jqx-52jm","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-vvfj-2jqx-52jm","https://nvd.nist.gov/vuln/detail/CVE-2025-59842","https://github.com/jupyterlab/jupyterlab/commit/88ef373039a8cc09f27d3814382a512d9033675c","https://github.com/jupyterlab/jupyterlab"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-vvfj-2jqx-52jm","url":"https://osv.dev/vulnerability/GHSA-vvfj-2jqx-52jm"}],"summary":"JupyterLab LaTeX typesetter links did not enforce `noopener` attribute"}