CVE-2025-30370

CVE-2025-30370 affects the jupyterlab-git JupyterLab extension. When a user opens a repository whose directory name contains a shell command substitution (e.g., $()) and selects “Git > Open Git Repository in Terminal,” the extension previously executed a shell command via a cd to the repositor...

CVE-2025-30370

creationtimestamp| type| source ---|---|--- 2025-04-03 21:51:40+00:00| published-proof-of-concept| https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-cj5w-8mjf-r5f8 2025-04-03 22:51:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114276478970363828 2025-04-03...