Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/jupyterlab@4.5.0a1
Typepypi
Namespace
Namejupyterlab
Version4.5.0a1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.7
Latest_non_vulnerable_version4.5.7
Affected_by_vulnerabilities
0
url VCID-ue1w-amy4-tye7
vulnerability_id VCID-ue1w-amy4-tye7
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-40171
reference_id
reference_type
scores
0
value 0.0004
scoring_system epss
scoring_elements 0.12368
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-40171
1
reference_url https://github.com/jupyter/notebook
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jupyter/notebook
2
reference_url https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-07T12:24:07Z/
url https://github.com/jupyter/notebook/security/advisories/GHSA-rch3-82jr-f9w9
3
reference_url https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-output-and-files
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-output-and-files
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-40171
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-40171
5
reference_url https://github.com/advisories/GHSA-rch3-82jr-f9w9
reference_id GHSA-rch3-82jr-f9w9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rch3-82jr-f9w9
fixed_packages
0
url pkg:pypi/jupyterlab@4.5.7
purl pkg:pypi/jupyterlab@4.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jupyterlab@4.5.7
aliases CVE-2026-40171, GHSA-rch3-82jr-f9w9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ue1w-amy4-tye7
1
url VCID-v114-tdxj-ybdu
vulnerability_id VCID-v114-tdxj-ybdu
summary JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-42266
reference_id
reference_type
scores
0
value 0.00029
scoring_system epss
scoring_elements 0.08996
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-42266
1
reference_url https://github.com/jupyterlab/jupyterlab
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jupyterlab/jupyterlab
2
reference_url https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-13T15:28:30Z/
url https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7
3
reference_url https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-13T15:28:30Z/
url https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4
4
reference_url https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-13T15:28:30Z/
url https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html
5
reference_url https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-13T15:28:30Z/
url https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42266
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-42266
7
reference_url https://github.com/advisories/GHSA-37w4-hwhx-4rc4
reference_id GHSA-37w4-hwhx-4rc4
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-37w4-hwhx-4rc4
fixed_packages
0
url pkg:pypi/jupyterlab@4.5.7
purl pkg:pypi/jupyterlab@4.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jupyterlab@4.5.7
aliases BIT-jupyterlab-2026-42266, CVE-2026-42266, GHSA-37w4-hwhx-4rc4, PYSEC-2026-164
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v114-tdxj-ybdu
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/jupyterlab@4.5.0a1