Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

jupyterlab-git

3 known vulnerabilities (1 critical, 2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 2 high
Weekly downloads
27.5K
Dependents
13
Registry
PyPI

Advisories 3

  • jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

    Affected: fixed in 0.54.0.

  • CVE-2026-54527Critical 9.3

    JupyterLab Git: Stored XSS leading to RCE

    Affected: from 0.30.0b3, fixed in 0.54.0.

  • jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

    Affected: fixed in 0.51.1.