Jupyterlab Desktop
関連 0slug: jupyterlab-desktop
このタグの解説はまだありません。
Jupyterlab Desktop に関連する脆弱性 4
- 重大 9.4 JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the server-selection dialog and Welcome view without safe encoding. An attacker who convinces a user to submit a crafted URL can execute JavaScript in the Welcome rend... CVE-2026-102530
- 中 5.5 JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS shipped with Electron's RunAsNode fuse enabled, allowing ELECTRON_RUN_AS_NODE to execute arbitrary Node.js code in the application process. An attacker who can already execute... CVE-2025-55002
- 重大 9.6 解説あり JupyterLab Desktopの脆弱性2件、修正版あり JupyterLab Desktopに、細工されたノートブックや接続先URLを介して利用者のPCで任意のコードが実行される脆弱性が2件公表されました。4.6.2-1に更新し、更新までは外部から受け取ったノートブックを開かないでください。 CVE-2026-86044
- 中 5.5 JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS) JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop for macOS declared the com.apple.security.cs.allow-dyld-environment-variables entitlement, allowing the dynamic linker to honor DYLD_INSERT_LIBRARIES despite the hardened runtime. An att... CVE-2025-54991