CVE-2024-39700-PoC

CVE-2024-39700 Prova de Conceito Repositórios criados usando este template com a opção de teste incluem o workflow update-integration-tests.yml, que possui uma vulnerabilidade de RCE. PoC PR: https://github.com/LOURC0D3/CVE-2024-39700-PoC/pull/2 Commit Resultado da Action:...

CVE-2024-39700 Remote Code Execution (RCE) vulnerability in jupyterlab extension template `update-integration-tests` GitHub Action

JupyterLab extension template is a copier template for JupyterLab extensions. Repositories created using this template with test option include update-integration-tests.yml workflow which has an RCE vulnerability. Extension authors hosting their code on GitHub are urged to upgrade the template to...