Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-37w4-hwhx-4rc4
  • PyPI/jupyterlab
 JupyterLab has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request 05 May
  • Fix available
  • Severity - 8.8 (High)
CLEANSTART-2026-PS25216
  • CleanStart/tensorflow-gpu-jupyter
 Security fix for ghsa-37w4-hwhx-4rc4 applied in: tensorflow-gpu-jupyter 2.21.0-r5 18 Sep
  • Fix available
BIT-jupyterlab-2026-42266
  • Bitnami/jupyterlab
 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 15 May
  • Fix available
  • Severity - 8.8 (High)
PYSEC-2026-164
  • PyPI/jupyterlab
 See record for full details 13 May
  • Fix available
  • Severity - 8.8 (High)
CVE-2026-42266
  • github.com/jupyterlab/jupyterlab
 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request. 13 May
  • Fix available
  • Severity - 8.8 (High)
CGA-p29j-46ww-hr94
  • Chainguard/datahub-ingestion-fips
 See record for full details 06 May
  • Fix available
  • Severity - 8.8 (High)
CGA-58p8-mvq7-c4pc
  • Chainguard/datahub-ingestion
 See record for full details 06 May
  • Fix available
  • Severity - 8.8 (High)
CGA-rvqj-jjqq-mxq7
  • Chainguard/datahub-ingestion
 See record for full details 06 May
  • Fix available
  • Severity - 8.8 (High)
CGA-9g6g-f7pp-v8p7
  • Chainguard/datahub-ingestion-fips
 See record for full details 06 May
  • Fix available
  • Severity - 8.8 (High)