CVE-2024-39700

🗓️ 16 Jul 2024 17:37:49Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 147 Views

JupyterLab extension template 'copier' has RCE vulnerability in 'update-integration-tests.yml' workflow. Upgrade template on GitHub, users advised to accept file overwriting and consider disabling GitHub Actions temporarily. Rebase open pull requests and defer changes to release workflow if upgrading from version prior to 4.3.0

Reporter	Title	Published	Views	Family All 74
GithubExploit	Exploit for CVE-2024-39700	29 Jul 202408:33	–	githubexploit
GithubExploit	Exploit for CVE-2024-39700	29 Jul 202408:33	–	githubexploit
Circl	CVE-2024-39700	16 Jul 202421:18	–	circl
Cvelist	CVE-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action	16 Jul 202417:37	–	cvelist
EUVD	EUVD-2024-38192	3 Oct 202520:07	–	euvd
Kitploit	CVE-2024-39700-PoC	29 Oct 202604:07	–	kitploit
NVD	CVE-2024-39700	16 Jul 202418:15	–	nvd
osv_bit	BIT-JUPYTERLAB-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action	9 Sep 202505:40	–	osv_bit
osv_pysec	PYSEC-2024-322	16 Jul 202418:15	–	osv_pysec
Positive Technologies	PT-2024-28639	16 Jul 202400:00	–	ptsecurity

NVD

Vulners

Vulnrichment

Node

jupyter jupyterlabRange<4.3.0

[
  {
    "vendor": "jupyterlab",
    "product": "extension-template",
    "versions": [
      {
        "version": "< 4.3.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/jupyterlab/extension-template/commit/035e78c1c65bcedee97c95bb683abe59c96bc4e6
github	www.github.com/jupyterlab/extension-template/security/advisories/GHSA-45gq-v5wm-82wg

17 Jun 2026 07:42Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.19.8 - 9.9

EPSS0.01092

SSVC

CWE-94