JupyterLab versions prior to 4.5.9 contain a stored cross-site scripting (XSS) vulnerability in the Extension Manager. This flaw arises because the Extension Manager does not properly validate URI protocols in package metadata URLs. Malicious PyPI packages can exploit this by including javascript: URLs in their metadata, which execute arbitrary JavaScript in the context of the JupyterLab origin when users click on the extension name.