Skip to content
OpenAdvisories

Package · PyPI

jupyterlab-git

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.1
    CVE-2026-54528

    jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

    JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() in GitHandler.prepare() in jupyterlab_git/handlers.py to enforce excluded_paths, allowing an authenticated user on a case-insensitive filesystem to va…

    jupyterlab jupyterlab-git jupyterlab-git PyPI
  • Critical 9.3
    CVE-2026-54527

    JupyterLab Git: Stored XSS leading to RCE

    JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScr…

    jupyterlab jupyterlab-git jupyterlab-git @jupyterlab/git npm PyPI
  • High 7.4
    CVE-2025-30370

    jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

    jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(<command>). These directory names are allowed i…

    jupyterlab jupyterlab-git jupyterlab-git PyPI