CVE-2026-54528

Summary of vulnerability (CVE-2026-54528): The jupyterlab-git extension for JupyterLab is affected prior to version 0.54.0. On case-insensitive filesystems (e.g., macOS APFS, Windows NTFS), the code path that enforces excluded_paths uses fnmatch.fnmatchcase(), which is case-sensitive and can be b...

elyra (>=0.7.1, <=4.1.1), elyra-code-snippet-extension (>=1.3.0, <=4.1.1) +12 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.11.0, <=0.52.0)

jupyterlab-git PYPI version =0.11.0, =0.7.1, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =2.2.0, =3.14.0, =1.3.1, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2026-54528 Source advisory: MEND:CVE-2026-54528...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

fps-jupyterlab-git (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-54527 via jupyterlab-git-core (0.53.0)

jupyterlab-git-core PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab-git-core and may be impacted: - fps-jupyterlab-git =0.3.0, =0.3.1 Source cves: CVE-2026-54527 Source advisory: MEND:CVE-2026-54527...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527

CVE-2026-54527 affects the jupyterlab-git extension. The PlainTextDiff.ts createHeader() renders renamed-file headers by directly inserting Git filenames into innerHTML, enabling stored XSS that can lead to remote code execution. Affected range is before 0.54.0, with fix released in 0.54.0. Explo...

@jupyterlab/pullrequests (>=2.0.0-alpha.0, <=3.0.2) potentially affected by CVE-2026-54527 via @jupyterlab/git (>=0.30.0, <=0.40.0)

@jupyterlab/git NPM version =0.30.0, =2.0.0-alpha.0, =3.0.2 Source cves: CVE-2026-54527 Source advisory: MEND:CVE-2026-54527...

elyra (>=2.2.2, <=4.1.1), elyra-code-snippet-extension (>=1.3.0, <=4.1.1) +12 more potentially affected by CVE-2026-54527 via jupyterlab-git (>=0.30.0, <=0.52.0)

jupyterlab-git PYPI version =0.30.0, =2.2.2, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =2.2.2, =3.14.0, =2.2.2, =0.4.0, =3.0.0b0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2026-54527 Source advisory: MEND:CVE-2026-54527...

EUVD-2026-42428

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54527 JupyterLab Git: Stored XSS leading to RCE

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

CVE-2026-54528: Improper Handling of Case Sensitivity

JupyterLab Git is a Git extension for JupyterLab. Prior to 0.54.0, jupyterlab-git uses fnmatch.fnmatchcase in GitHandler.prepare in jupyterlabgit/handlers.py to enforce excludedpaths, allowing an authenticated user on a case-insensitive filesystem to vary URL path casing and read excluded...

CVE-2026-54527: Improper Neutralization of Input During Web Page Generation

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff ...

PYSEC-2026-1483 jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

Overview On many platforms, a third party can create a Git repository under a name that includes a shell command substitution ^1 string in the syntax $. These directory names are allowed in macOS and a majority of Linux distributions ^2. If a user starts jupyter-lab in a parent directory of this...

jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

OverviewOn many platforms, a third party can create a Git repository under a name that includes a shell command substitution ^1 string in the syntax $. These directory names are allowed in macOS and a majority of Linux distributions ^2. If a user starts jupyter-lab in a parent directory of this...

elyra (>=0.7.1, <=4.0.0rc4), elyra-code-snippet-extension (>=1.3.1, <=4.0.0rc2) +11 more potentially affected by CVE-2025-30370 via jupyterlab-git (>=0.11.0, <=0.50.2)

jupyterlab-git PYPI version =0.11.0, =0.7.1, =1.3.1, =3.14.0, =1.3.1, =1.3.1, =2.2.0, =3.14.0, =1.3.1, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2025-30370 Source advisory: OSV:PYSEC-2026-1483...

Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter-

Stored XSS leading to Remote Code Execution Vulnerability in...

jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

Summary jupyterlab-git 0.53.0 latest, 2026-04-30 uses fnmatch.fnmatchcase in GitHandler.prepare jupyterlabgit/handlers.py:91 to enforce the admin-configured excludedpaths security control. Because fnmatchcase is unconditionally case-sensitive, an authenticated user on a case-insensitive filesyste...

elyra (>=0.7.1, <=4.1.1), elyra-code-snippet-extension (>=1.3.0, <=4.1.1) +12 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.11.0, <=0.52.0)

jupyterlab-git PYPI version =0.11.0, =0.7.1, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =2.2.0, =3.14.0, =1.3.1, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2026-54528 Source advisory: GHSA-436Q-JWFR-RM2H...

elyra (>=0.7.1, <=4.1.1), elyra-code-snippet-extension (>=1.3.0, <=4.1.1) +12 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.11.0, <=0.52.0)

jupyterlab-git PYPI version =0.11.0, =0.7.1, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =2.2.0, =3.14.0, =1.3.1, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2026-54528 Source advisory: OSV:GHSA-436Q-JWFR-RM2H...

elyra (>=0.7.1, <=4.1.1), elyra-code-snippet-extension (>=1.3.0, <=4.1.1) +12 more potentially affected by CVE-2026-54528 via jupyterlab-git (>=0.11.0, <=0.52.0)

jupyterlab-git PYPI version =0.11.0, =0.7.1, =1.3.0, =3.14.0, =1.3.0, =1.3.0, =2.2.0, =3.14.0, =1.3.1, =0.4.0, =2.1.0, =0.1.30, =1.3.19, =0.1.0, =0.2.9 Source cves: CVE-2026-54528 Source advisory: SNYK:PYTHON-JUPYTERLABGIT-17391476...