jupyterlab

HighPyPICVE-2026-102831October 1, 2026

What to do

Update jupyterlab to 4.6.4 or later.

pip install "jupyterlab>=4.6.4"

A cross-site scripting flaw affects the PyPI package jupyterlab. Affected versions: >= 4.6.0, <= 4.6.3. Fixed from version 4.6.4. CVSS score 8.1.

What the flaw allows: Code can run in visitors’ browsers.

Package: jupyterlab
Ecosystem: PyPI (Python)
Class: Cross-site scripting
Affected versions: >= 4.6.0, <= 4.6.3
CVSS: 8.1
Published on: October 1, 2026

Sources

GitHub Security Advisory — GHSA-6966-vjj6-99xvGitHub Security Advisories
NVD — CVE-2026-102831NVD

Entry built automatically from the cited security advisory, with no model rewriting. Acknowledged by the organisation or vendor, notified to an authority, or established by two independent sources.