Detections
Analytics
SCA: security update for jupyterlab, notebook (GHSA-4m77-cmpx-vjc4)
medium Tenable Cloud Security Plugin ID 410275
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter
Notebook and Architecture. This vulnerability depends on user interaction by opening a malicious Markdown
file using JupyterLab preview feature. A malicious user can access any data that the attacked user has
access to as well as perform arbitrary requests acting as the attacked user. JupyterLab version 4.0.11 has
been patched. Users are advised to upgrade. Users unable to upgrade should disable the table of contents
extension. (CVE-2024-22420)
See Also
Plugin Details
Severity: Medium
ID: 410275
Version: Revision 1.14
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.3
Percentile: 9.14
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2024-22420
CVSS v3
Risk Factor: Medium
Base Score: 6.1
Temporal Score: 5.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 1/19/2024
Vulnerability Publication Date: 1/19/2024
Reference Information
CVE: CVE-2024-22420
cwe: CWE-79