CVE-2026-42557
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Bitnami. Niedriger laut GHSA (hoch), Red Hat (hoch).
Beschreibung
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook, jupyter-notebook, jupyterlab | 7.5.6 und 1 weitere |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | kein Fix angegeben |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | kein Fix angegeben |
| pip::GitHub Security Advisory pip | jupyterlab, notebook | 4.5.7 und 1 weitere |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
Alle 22 Einträge aus 19 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyter-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyterlab | 4.5.7 |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | kein Fix angegeben |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | kein Fix angegeben |
| pip::GitHub Security Advisory pip | jupyterlab | 4.5.7 |
| pip::GitHub Security Advisory pip | notebook | 7.5.6 |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
| rapidfort debian 12 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort debian 13 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort fedora 43 | jupyterlab | 4.4.10-3.fc43 |
| rapidfort Oracle Linux 10 | jupyterlab | kein Fix angegeben |
| rapidfort ubuntu 20.04 | jupyterlab | kein Fix angegeben |
| rapidfort ubuntu 22.04 | jupyterlab | kein Fix angegeben |
| rapidfort ubuntu 24.04 | jupyterlab | kein Fix angegeben |
Referenzen
- https://access.redhat.com/errata/RHSA-2026:43038
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/security/cve/CVE-2026-42557
- https://bugzilla.redhat.com/show_bug.cgi?id=2477086
- https://github.com/jupyterlab/jupyterlab
- https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg
- https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files
- https://nvd.nist.gov/vuln/detail/CVE-2026-42557