{"action":"Upgrade jupyterlab to 4.3.0 or later.","affected":[{"fixed":"4.3.0","introduced":"0"}],"component":"jupyterlab","cve_ids":["CVE-2024-39700"],"ecosystem":"PyPI","epss":0.01092,"exploited":false,"fixed_versions":["4.3.0"],"ghsa_id":"GHSA-45gq-v5wm-82wg","id":"tcs_01M5KGN501KQSG3VVR58R5K284","modified_at":"2026-07-13T07:26:34.864535687Z","published_at":"2024-07-16T18:15:07.857Z","references":["https://osv.dev/vulnerability/PYSEC-2024-322","https://github.com/jupyterlab/extension-template/commit/035e78c1c65bcedee97c95bb683abe59c96bc4e6","https://github.com/jupyterlab/extension-template/security/advisories/GHSA-45gq-v5wm-82wg"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-322","url":"https://osv.dev/vulnerability/PYSEC-2024-322"}],"summary":"JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has an"}