THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-42557 (CRITICAL 9.6) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker li

[NVD] CVE-2026-42557 (CRITICAL 9.6) — jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker li

lownvdPublished 2026-05-13

CVE-2026-42557 CVSS: 9.6 CRITICAL Published: 2026-05-13T16:16:48.167

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to 4.5.7, JupyterLab's HTML sanitizer allowlists data-commandlinker-command and data-commandlinker-args on button elements, while CommandLinker listens for all click events on document.body and ex

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-42557