OESA-2025-1240

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1240
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1240.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1240
Upstream
Published
2025-03-07T15:26:49Z
Modified
2025-08-12T05:42:01.905291Z
Summary
python-jupyterlab security update
Details

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook (notebook, terminal, text editor, file browser, rich outputs, etc.) in a flexible and powerful user interface.

Security Fix(es):

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown file using JupyterLab preview feature. A malicious user can access any data that the attacked user has access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents extension.(CVE-2024-22420)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / python-jupyterlab

Package

Name
python-jupyterlab
Purl
pkg:rpm/openEuler/python-jupyterlab&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.5-1.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "python3-jupyterlab-4.3.5-1.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "python-jupyterlab-4.3.5-1.oe2403sp1.src.rpm"
    ]
}