jupyterlab-git vulnerabilities
3 known vulnerabilities in jupyterlab-git from Jupyterlab. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.1 High severity
jupyterlab-git: Improper Handling of Case Sensitivity
JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase() in GitHandler.prepare() in jupyterlab_git/handlers.py to enforce excluded_paths, allowing an authenticated user on a case-insensitive filesystem to var
- 9.0 Critical severity
jupyterlab-git: Improper Neutralization of Input During Web Page Generation
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScri
- 7.4 High severity
jupyterlab-git: Improper Neutralization of Special Elements used in an OS Command
jupyterlab-git is a JupyterLab extension for version control using Git. On many platforms, a third party can create a Git repository under a name that includes a shell command substitution string in the syntax $(<command>). These directory names are allowed in