https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 02:48:10 +0000 https://db.gcve.eu/vuln/ghsa-gx64-gj6p-pc4c <p><strong>Affected:</strong> PyPI: jupyterlab</p> <p>JupyterLab&#39;s image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution (RCE) on the JupyterLab server.</p> <p>### Impact</p> <p>This vulnerability allows for arbitrary code execution.</p> <p>### Patches</p> <p>JupyterLab [`v4.6.2`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2) and [`v4.5.10`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10) contain the patch.</p> <p>### Workarounds</p> <p>Disable the image viewer plugin:</p> <p>``` jupyter labextension disable @jupyterlab/imageviewer-extension:plugin ```</p> <p>Confirm with:</p> <p>``` jupyter labextension list ```</p> <p><strong>Affected:</strong> PyPI: jupyterlab</p> <p>JupyterLab&#39;s image viewer allows for cross-site scripting (XSS) when a specially-crafted image file is opened through the image viewer and then opened in a new tab. This XSS issue can be used to cause remote code execution (RCE) on the JupyterLab server.</p> <p>### Impact</p> <p>This vulnerability allows for arbitrary code execution.</p> <p>### Patches</p> <p>JupyterLab [`v4.6.2`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2) and [`v4.5.10`](https://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10) contain the patch.</p> <p>### Workarounds</p> <p>Disable the image viewer plugin:</p> <p>``` jupyter labextension disable @jupyterlab/imageviewer-extension:plugin ```</p> <p>Confirm with:</p> <p>``` jupyter labextension list ```</p> https://db.gcve.eu/vuln/ghsa-gx64-gj6p-pc4c