CVE-2026-73415 | Jupyter JupyterLab up to 4.5.9/4.6.1 ImageViewer widget.ts cross site scripting

August 12, 2026 Yanac

A vulnerability classified as problematic was found in Jupyter JupyterLab up to 4.5.9/4.6.1. The impacted element is an unknown function of the file packages/imageviewer/src/widget.ts of the component ImageViewer. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-73415. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More