Skip to content
OpenAdvisories

Package · PyPI

jupyterlab-git

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-54528

    jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

    JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() in GitHandler.prepare() in jupyterlab_git/handlers.py to enforce excluded_paths, allowing an authenticated user on a case-insensitive filesystem to va…

    jupyterlab jupyterlab-git jupyterlab-git PyPI
  • High 7.4
    CVE-2025-30370

    jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

    jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(<command>). These directory names are allowed i…

    jupyterlab jupyterlab-git jupyterlab-git PyPI