> CVE-2025-59842

« BACK_TO_HOME
PUBLISHED
2025-09-26 16:15
MODIFIED
2025-09-29 19:34
EPSS (Prob. Exploit)
0.24%
Top 84.8%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in LaTeX (typically visibly different from other links). This issue has been patched in version 4.4.8.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Low

> GITHUB SECURITY ADVISORY

GHSA-vvfj-2jqx-52jm LOW

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

AFFECTED PACKAGES:
PIP / jupyterlab
<= 4.4.7
Fixed in: 4.4.8

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

AFFECTED PACKAGES:
Unknown / Unknown
26135 versions affected
ALIASES:
BIT-jupyterlab-2025-59842, GHSA-vvfj-2jqx-52jm, PYSEC-2026-1482

> HISTORIQUE DES MODIFICATIONS

Première apparition
26/09/2025 16:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:05
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:05
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME