jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in LaTeX (typically visibly different from other links). This issue has been patched in version 4.4.8.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-547bc6efdc advisory.

    jupyterlab 4.4.9 fixing CVE-2025-59842.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-136667dc88 advisory.

    jupyterlab 4.4.9 fixing CVE-2025-59842.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5ce0931fe3 advisory.

    jupyterlab 4.4.9 fixing CVE-2025-59842.

    ----

    Rebuilt for Python 3.14.0rc3 bytecode change

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter     Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files     and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is     deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering     extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those     extensions included target=_blank (no such extensions are known at time of writing) and they were to click     on a link generated in LaTeX (typically visibly different from other links). This issue has been patched     in version 4.4.8. (CVE-2025-59842)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-2171590e11 advisory.

    New version of jupyterlab fixing CVE-2025-59842 and a new version of notebook.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter
    Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files
    and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is
    deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering
    extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those
    extensions included target=_blank (no such extensions are known at time of writing) and they were to click
    on a link generated in LaTeX (typically visibly different from other links). This issue has been patched
    in version 4.4.8. (CVE-2025-59842)

ID	Name	Product	Family	Severity
266609	Fedora 42 : jupyterlab (2025-547bc6efdc)	Nessus	Fedora Local Security Checks	low
266608	Fedora 41 : jupyterlab (2025-136667dc88)	Nessus	Fedora Local Security Checks	low
266606	Fedora 43 : jupyterlab (2025-5ce0931fe3)	Nessus	Fedora Local Security Checks	low
266091	Linux Distros Unpatched Vulnerability : CVE-2025-59842	Nessus	Misc.	low
266022	Fedora 44 : jupyterlab / python-notebook (2025-2171590e11)	Nessus	Fedora Local Security Checks	high
435445	SCA: security update for jupyterlab (GHSA-vvfj-2jqx-52jm)	Tenable Cloud Security	SCA Checks	low
435445	SCA: security update for jupyterlab (GHSA-vvfj-2jqx-52jm)	Tenable Self-Hosted Container Security	SCA Checks	low

Detections

Analytics

CVE-2025-59842

low

Tenable Plugins

low

low

low

low

high

low

low