Skip to content

CVEs Search About

synced 12 MIN AGOT-12M

01 RecordSTATE: —

02 Description

SRC: CNA

03 Metadata

SCHEMA: CVE JSON 5

04 Affected products

PAIRS: —

05 References

REFS: —

About API docs Terms

CVE content courtesy of the CVE Program (cve.org). exploit.cc is not an official CVE Program property. Data mirrored from github.com/CVEProject/cvelistV5.

SRC: CVELISTV5 / SYNC: T-12M / LAG: 14M / REC: 377,305 / REV: C6-1C / V4

01 RecordSTATE: PUBLISHED

CVE-2026-73417

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

HighPUBLISHEDCNA: GitHub_M

Base score8.6 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L

View raw JSON CVE Program record

02 Description

CNA: GitHub_M

JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)

03 Metadata

SCHEMA: 5.2

Published: 2026-08-13 22:04Z20 HR AGO
Last updated: 2026-08-14 16:06Z2 HR AGO
Reserved: 2026-08-12
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 8.6)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:L
Weaknesses: CWE-79 CWE-116
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: e6bb8beccbbdc9df59e23137c5ce15bc9564e7d35d838c5fe6eca11ef4c70a45

04 Affected products

PAIRS: 1

VendorProductVersionsPlatforms

jupyterlabjupyterlab>= 3.3.0, < 4.5.10, >= 4.6.0, < 4.6.2—

05 References

REFS: 10

github.comhttps://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-pppj-hq3g-57pjx_refsource_CONFIRM
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19184x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19185x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/pull/19186x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/9365f020baec5221deaf11535ed554c06637c999x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/be9303f5bcd5308eaeae953c5a3c903046682c2cx_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/commit/f1beab4a2027af4719d6edc07d52d6cf5a39a432x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.5.10x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.6.2x_refsource_MISC
github.comhttps://github.com/jupyterlab/jupyterlab/releases/tag/v4.7.0a1x_refsource_MISC