OESA-2025-1239

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1239
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1239.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1239
Upstream
Published
2025-03-07T15:26:48Z
Modified
2025-08-12T05:42:01.423490Z
Summary
python-jupyterlab security update
Details

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.) in a flexible and powerful user interface.

Security Fix(es):

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension.(CVE-2024-22420)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS / python-jupyterlab

Package

Name
python-jupyterlab
Purl
pkg:rpm/openEuler/python-jupyterlab&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.5-1.oe2403

Ecosystem specific 

{
    "noarch": [
        "python3-jupyterlab-4.3.5-1.oe2403.noarch.rpm"
    ],
    "src": [
        "python-jupyterlab-4.3.5-1.oe2403.src.rpm"
    ]
}