Threats Tagged 'cve-2026-73417'

Multiple security issues were addressed in the jupyter-jupyterlab-4.5.11-1.1 package distributed by SUSE for openSUSE Tumbleweed. These fixes improve the security posture of the JupyterLab environment. No specific vulnerability details or affected versions are provided.

Multiple security issues affecting the jupyter-jupyterlab package on openSUSE Tumbleweed have been addressed in version 4.5.10-1.1. These vulnerabilities are collectively fixed in this package update. No specific technical details or CVSS scores are provided. The severity is assessed as medium based on the available information.

JupyterLab versions from 3.3.0 up to but not including 4.5.10, and from 4.6.0 up to but not including 4.6.2, contain a cross-site scripting (XSS) vulnerability via crafted overrides.json settings files. This vulnerability arises because certain settings are not properly validated before being inserted into style content, allowing malicious code execution when a user imports a crafted settings file or when an attacker plants such a file in a shared location. The embedded code executes with the affected user's privileges and can read or modify notebooks, files, and execute code on the notebook server and connected kernels. The issue is fixed in versions 4.5.10 and 4.6.2.