{"action":"Upgrade jupyterlab to 4.4.8 or later.","affected":[{"fixed":"4.4.8","introduced":"0"}],"component":"jupyterlab","cve_ids":["CVE-2025-59842"],"ecosystem":"PyPI","epss":0.0024,"exploited":false,"fixed_versions":["4.4.8"],"ghsa_id":"GHSA-vvfj-2jqx-52jm","id":"tcs_01M5KGSW5877GZ900BSJ1CAY1T","modified_at":"2026-07-07T17:57:38.072715082Z","published_at":"2026-07-07T16:03:05.847517Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1482","https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-vvfj-2jqx-52jm","https://nvd.nist.gov/vuln/detail/CVE-2025-59842","https://github.com/jupyterlab/jupyterlab/commit/88ef373039a8cc09f27d3814382a512d9033675c","https://github.com/jupyterlab/jupyterlab","https://pypi.org/project/jupyterlab","https://github.com/advisories/GHSA-vvfj-2jqx-52jm"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1482","url":"https://osv.dev/vulnerability/PYSEC-2026-1482"},{"source":"nvd","source_id":"CVE-2025-59842","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59842"}],"summary":"JupyterLab LaTeX typesetter links did not enforce `noopener` attribute"}