Threats tagged 'brew-jupyterlab-cve-2026-44898'

JupyterLab's use of Mistune's render_toc_ul() function allows unescaped user-supplied heading IDs to be injected directly into HTML anchor href attributes. This leads to a cross-site scripting (XSS) vulnerability when heading IDs are derived from user input without proper escaping. An attacker can craft headings that break out of the href attribute context and inject arbitrary HTML, including script tags, into the table of contents. This vulnerability affects versions from 1.2.0 up to but not including 4.5.7_1 and has been assigned CVE-2026-44898. A fix is available in version 4.5.7_1.