Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/jupyterlab@4.3.0a2
Typepypi
Namespace
Namejupyterlab
Version4.3.0a2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.5.7
Latest_non_vulnerable_version4.5.7
Affected_by_vulnerabilities
0
url VCID-uds2-gzff-jfct
vulnerability_id VCID-uds2-gzff-jfct
summary JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.
references
0
reference_url https://github.com/jupyterlab/jupyterlab
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jupyterlab/jupyterlab
1
reference_url https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.7
2
reference_url https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4
3
reference_url https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://jupyterhub.readthedocs.io/en/5.2.1/explanation/websecurity.html
4
reference_url https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://jupyterlab.readthedocs.io/en/latest/user/extensions.html#extension-manager-implementations
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-42266
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-42266
fixed_packages
0
url pkg:pypi/jupyterlab@4.5.7
purl pkg:pypi/jupyterlab@4.5.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jupyterlab@4.5.7
aliases CVE-2026-42266, GHSA-37w4-hwhx-4rc4, PYSEC-2026-164
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uds2-gzff-jfct
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/jupyterlab@4.3.0a2