JupyterLab versions prior to 4.4.8 did not enforce the noopener attribute on links generated by LaTeX typesetters in Markdown files and cells. This could theoretically allow reverse tabnabbing attacks if third-party LaTeX-rendering extensions generated links with target=_blank, although no such extensions are currently known. The issue has been fixed in version 4.4.8.