Threats Tagged 'cve-2026-73416'

Multiple security issues were addressed in the jupyter-jupyterlab-4.5.11-1.1 package distributed by SUSE for openSUSE Tumbleweed. These fixes improve the security posture of the JupyterLab environment. No specific vulnerability details or affected versions are provided.

Multiple security issues affecting the jupyter-jupyterlab package on openSUSE Tumbleweed have been addressed in version 4.5.10-1.1. These vulnerabilities are collectively fixed in this package update. No specific technical details or CVSS scores are provided. The severity is assessed as medium based on the available information.

JupyterLab versions from 4.5.0 up to but not including 4.5.10, and from 4.6.0 up to but not including 4.6.2, contain a vulnerability in the PyPI extension manager. The blocklist enforcement uses a weaker normalization method than PyPI's canonical package-name normalization, allowing an authenticated user to bypass the blocklist by requesting an equivalent package name variant. This lets the user install prohibited extensions, defeating integrity restrictions and potentially affecting availability without gaining additional read access. The issue is fixed in versions 4.5.10 and 4.6.2.