[Git][security-tracker-team/security-tracker][master] Add CVE-2026-42266/jupyterlab

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ce8ee39 by Salvatore Bonaccorso at 2026-05-16T14:07:14+02:00
Add CVE-2026-42266/jupyterlab

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1762,7 +1762,8 @@ CVE-2026-42406 (A vulnerability exists in BIG-IP and BIG-IQ systems where a high
 CVE-2026-42290 (protobufjs-cli is the command line add-on for protobuf.js. Prior to 1. ...)
 	NOT-FOR-US: protobufjs-cli
 CVE-2026-42266 (jupyterlab is an extensible environment for interactive and reproducib ...)
-	TODO: check
+	- jupyterlab <unfixed>
+	NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-37w4-hwhx-4rc4
 CVE-2026-42063 (A vulnerability exists in iControl SOAP where an authenticated attacke ...)
 	NOT-FOR-US: F5
 CVE-2026-42062 (ELECOM wireless LAN access point devices contain an OS command injecti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ce8ee39de1a1a647fba203f136345f361b8abb7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ce8ee39de1a1a647fba203f136345f361b8abb7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260516/a0b3d446/attachment-0001.htm>