[Git][security-tracker-team/security-tracker][master] jupyerlab/commit

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
376476f2 by Bastien Roucariès at 2026-08-16T14:05:45+02:00
jupyerlab/commit

According to commit fix the CHSA thus this CVE

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5717,9 +5717,11 @@ CVE-2026-73628 (Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected c
 CVE-2026-73627 (JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4 ...)
 	- jupyterlab <unfixed> (bug #1144343)
 	NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-h5v5-8746-g7mm
+	NOTE: Fixed by: https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c (v4.5.10)
 CVE-2026-73626 (JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/b ...)
 	- jupyterlab <unfixed> (bug #1144343)
 	NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-whvh-wf3x-g77j
+	NOTE: Fixed by: https://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2c (v4.5.10)
 CVE-2026-73625 (GitPython versions before 3.1.54 contain a remote code execution vulne ...)
 	- python-git <unfixed> (bug #1144344)
 	NOTE: https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/376476f2c72d19a9339552385a791468b5201941

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/376476f2c72d19a9339552385a791468b5201941
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260816/a0195569/attachment.htm>