CVE-2026-42557
jupyterlab: JupyterLab: Arbitrary code execution via deceptive button in HTML output
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, Bitnami. Plus basse selon GHSA (élevée), Red Hat (élevée).
Description
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and executes the named command without checking whether the element came from trusted JupyterLab UI. A notebook with a pre-saved HTML cell output containing a deceptive button can trigger arbitrary JupyterLab commands - including arbitrary code execution - on a single user click, without any code being submitted for execution by the user. This vulnerability is fixed in 4.5.7.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook, jupyter-notebook, jupyterlab | 7.5.6 et 1 autres |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | pas de correctif indiqué |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | pas de correctif indiqué |
| pip::GitHub Security Advisory pip | jupyterlab, notebook | 4.5.7 et 1 autres |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
Afficher les 22 entrées de 19 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | jupyter-base-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyter-notebook | 7.5.6 |
| bitnami::Bitnami Vulnerability Database | jupyterlab | 4.5.7 |
| alpine 3.24 | jupyter-notebook | 7.5.6-r0 |
| alpine edge | jupyter-notebook | 7.5.6-r0 |
| chainguard | datahub-ingestion-fips | 1.5.0.1-r2 |
| debian 13 | jupyterlab | pas de correctif indiqué |
| debian 14 | jupyterlab | 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| echo | jupyterlab | pas de correctif indiqué |
| pip::GitHub Security Advisory pip | jupyterlab | 4.5.7 |
| pip::GitHub Security Advisory pip | notebook | 7.5.6 |
| rapidfort alpine 3.20 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.21 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.22 | jupyterlab | 4.5.7-r0 |
| rapidfort alpine 3.23 | jupyterlab | 4.5.7-r0 |
| rapidfort debian 12 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort debian 13 | jupyterlab | 0:4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3 |
| rapidfort fedora 43 | jupyterlab | 4.4.10-3.fc43 |
| rapidfort Oracle Linux 10 | jupyterlab | pas de correctif indiqué |
| rapidfort ubuntu 20.04 | jupyterlab | pas de correctif indiqué |
| rapidfort ubuntu 22.04 | jupyterlab | pas de correctif indiqué |
| rapidfort ubuntu 24.04 | jupyterlab | pas de correctif indiqué |
Références
- https://access.redhat.com/errata/RHSA-2026:43038
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/security/cve/CVE-2026-42557
- https://bugzilla.redhat.com/show_bug.cgi?id=2477086
- https://github.com/jupyterlab/jupyterlab
- https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-mqcg-5x36-vfcg
- https://jupyterlab.readthedocs.io/en/latest/user/commands.html#commands-in-markdown-files
- https://nvd.nist.gov/vuln/detail/CVE-2026-42557