{"id":"ghsa-ghsa-jwrc-gm9j-263p","seq":2463,"kind":"advisory","title":"JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked","url":"https://github.com/advisories/GHSA-jwrc-gm9j-263p","permalink":"https://vulnpulse.app/items/ghsa-ghsa-jwrc-gm9j-263p","summary":"影響: pip:jupyterlab >= 4.6.0, <= 4.6.3 → 4.6.4, pip:jupyterlab >= 4.5.7, <= 4.5.10 → 4.5.11, pip:notebook >= 7.5.6, <= 7.6.2 → 7.6.3, pip:jupyterlite-core >= 0.7.5, <= 0.8.3 → 0.8.4\nDescription A Markdown file or a notebook output can carry a button that runs a JupyterLab command. Since 4.5.7 the first click on such a button opens a prompt naming the command, with Cancel, Run Once and Trust. Choosing Trust runs the command and marks the document trusted, so its later buttons run without a prompt. Which document gets marked is decided when the user answers, not when they click. Both trust commands read whichever document is current at that moment: markdownviewer:trust uses…","severity":"medium","techs":["python"],"cves":["CVE-2026-102832"],"tags":["GHSA-jwrc-gm9j-263p","jupyterlab","jupyterlab","notebook","jupyterlite-core"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-15T20:22:13.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}