Skip to content

CVEs Search About

synced 20 HR AGOT-20H

01 RecordSTATE: —

02 Description

SRC: CNA

03 Metadata

SCHEMA: CVE JSON 5

04 Affected products

PAIRS: —

05 References

REFS: —

CVE content courtesy of the CVE Program (cve.org). exploit.cc is not an official CVE Program property. CVE data sourced from github.com/CVEProject/cvelistV5.

SRC: CVELISTV5 / SYNC: T-20H / LAG: 20H / REC: 377,352 / REV: C6-1C / V4

01 RecordSTATE: PUBLISHED

CVE-2026-73416

jupyterlab: PyPI extension blocklist package-name canonicalization bypass

MediumPUBLISHEDCNA: GitHub_M

Base score6.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

CNA: GitHub_M

jupyterlab: PyPI extension blocklist package-name canonicalization bypass

03 Metadata

SCHEMA: 5.2

Published

2026-08-13 22:04Z1 DAY AGO

Last updated

2026-08-13 22:04Z1 DAY AGO

Reserved

2026-08-12

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 6.1)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Weaknesses

CWE-178Improper Handling of Case SensitivityBase
CWE-180Incorrect Behavior Order: Validate Before CanonicalizeVariant

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

0a4960911e84a7f85583f55dbe77b6b120204ed9a1942b145da684d119b3eff5

04 Affected products

PAIRS: 1

VendorProductVersionsPlatforms

jupyterlabjupyterlab>= 4.5.0, < 4.5.10, >= 4.6.0, < 4.6.2—

05 References

REFS: 10

github.comhttps://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-89vp-jrxv-24w8x_refsource_CONFIRM
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19184x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19185x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19186x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/9365f020baec5221deaf11535ed554c06637c999x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2cx_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.7.0a1x_refsource_MISC