[Git][security-tracker-team/security-tracker][master] jupyterlab n/a

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
062ee8a4 by Moritz Muehlenhoff at 2026-10-14T14:26:15+02:00
jupyterlab n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4651,7 +4651,8 @@ CVE-2026-102850 (Heap-based buffer overflow in Microsoft Office Access allows an
 CVE-2026-102849 (Heap-based buffer overflow in Microsoft Office Access allows an unauth ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-102832 (JupyterLab is an extensible environment for interactive and reproducib ...)
-	TODO: check
+	- jupyterlab <not-affected> (Vulnerable code introduced later in 4.5.7)
+	NOTE: https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-jwrc-gm9j-263p
 CVE-2026-102734 (asteval is a Python expression evaluator designed for restricted execu ...)
 	TODO: check
 CVE-2026-102672 (Electron is a framework for writing cross-platform desktop application ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062ee8a490f67d7093b03d2c5cc566de4c27739b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/062ee8a490f67d7093b03d2c5cc566de4c27739b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/9f4f54f0/attachment.htm>