{"answers":{"affected":"6 open source packages ship an affected version, including jupyterlab.","exploited":"There is no known exploitation of CVE-2026-73417 in the wild and no public exploit code.","fix":"Upgrade jupyterlab to a fixed version for your release line: 4.5.10 or 4.6.2.","what":"CVE-2026-73417 is a high-severity cross-site scripting vulnerability in jupyterlab, published on 13 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2026-73417 and fix it if it is affected.\n\nWhat it is: CVE-2026-73417 is a high-severity cross-site scripting vulnerability in jupyterlab, published on 13 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2026-73417 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- jupyterlab (Bitnami): affected from 3.3.0; fixed in 4.5.10, 4.6.2\n- jupyterlab (PyPI): affected from 3.3.0; fixed in 4.5.10, 4.6.2\n- jupyterlab (PyPI): affected from 3.3.0; fixed in 4.5.10\n- jupyterlab (PyPI): affected from 3.3.0; fixed in 4.5.10\n- jupyterlab (PyPI): affected from 4.6.0; fixed in 4.6.2\n- jupyterlab (PyPI): affected from 4.6.0; fixed in 4.6.2\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-73417/ (Markdown: https://insights.sbomify.com/CVE-2026-73417/index.md)","id":"CVE-2026-73417","markdown":"https://insights.sbomify.com/CVE-2026-73417/index.md","name":"CVE-2026-73417","record":{"aliases":["BIT-jupyterlab-2026-73417","CLEANSTART-2026-JZ86635","DEBIAN-CVE-2026-73417","GHSA-pppj-hq3g-57pj","MINI-pg34-3q6m-r22c","PYSEC-2026-3672","UBUNTU-CVE-2026-73417"],"analysis":{"component_type":"web_application","fix_type":"upgrade","impacts":["code_execution","data_read","data_modify"],"network_reachable":"yes","non_default_config":false,"product_category":"JupyterLab","requires_auth":"none","summary":"Attackers can execute arbitrary code via crafted settings files in JupyterLab, allowing them to read or modify notebooks and run code on connected kernels.","user_interaction":"required","vuln_class":"xss"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[],"cvss":{"score":8.6,"severity":"high","source":"cna","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L","version":"4.0"},"cwes":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation"},{"id":"CWE-116","name":"Improper Encoding or Escaping of Output"}],"description":"jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 3.3.0 until 4.5.10 and 4.6.2, JupyterLab allows notebook settings to be shared and applied through an overrides.json file using the Import button in the Settings Editor. In packages/notebook-extension/schema/tracker.json and packages/notebook-extension/src/index.ts, the sideBySideLeftMarginOverride and sideBySideRightMarginOverride settings are not properly validated before being inserted into style content, allowing a crafted settings file to contain instructions that execute as code instead of only changing display preferences. A user can import the malicious file, or an attacker with access to a shared settings location can plant an overrides.json that is applied automatically. The embedded code runs with the affected user's access and can read or modify notebooks and files and run code through the notebook server, including on a connected kernel. This issue is fixed in versions 4.5.10 and 4.6.2.","ecosystems":["Bitnami","PyPI"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)","id":"CVE-2026-73417","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Bitnami","product":null,"products":[],"type":"xss","year":"2026"},"n_packages":6,"n_references":10,"next":{"headline":"NextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers","id":"CVE-2026-73418"},"packages":[{"ecosystem":"Bitnami","fixed":["4.5.10","4.6.2"],"introduced":["3.3.0","4.6.0"],"last_affected":[],"package":"jupyterlab","purl":"pkg:bitnami/jupyterlab","source":"BIT-jupyterlab-2026-73417"},{"ecosystem":"PyPI","fixed":["4.5.10","4.6.2"],"introduced":["3.3.0","4.6.0"],"last_affected":[],"package":"jupyterlab","purl":"pkg:pypi/jupyterlab","source":"PYSEC-2026-3672"},{"ecosystem":"PyPI","fixed":["4.5.10"],"introduced":["3.3.0"],"last_affected":[],"package":"jupyterlab","purl":null,"source":"GHSA-pppj-hq3g-57pj"},{"ecosystem":"PyPI","fixed":["4.5.10"],"introduced":["3.3.0"],"last_affected":[],"package":"jupyterlab","purl":"pkg:pypi/jupyterlab","source":"GHSA-pppj-hq3g-57pj"},{"ecosystem":"PyPI","fixed":["4.6.2"],"introduced":["4.6.0"],"last_affected":[],"package":"jupyterlab","purl":null,"source":"GHSA-pppj-hq3g-57pj"},{"ecosystem":"PyPI","fixed":["4.6.2"],"introduced":["4.6.0"],"last_affected":[],"package":"jupyterlab","purl":"pkg:pypi/jupyterlab","source":"GHSA-pppj-hq3g-57pj"}],"prev":{"headline":"jupyterlab: PyPI extension blocklist package-name canonicalization bypass","id":"CVE-2026-73416"},"products":["jupyterlab"],"published":"2026-08-13","related":[],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"Bitnami","prefix":"BIT"},{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"PyPA Advisory Database","prefix":"PYSEC"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2026-08-14","vendors":["jupyterlab"]},"summary":"Attackers can execute arbitrary code via crafted settings files in JupyterLab, allowing them to read or modify notebooks and run code on connected kernels.","url":"https://insights.sbomify.com/CVE-2026-73417/"}