Read the docs
TI-2026-39372 Aliases CVE-2026-54527GHSA-f962-v9hr-pfg5

JupyterLab Git: Stored XSS leading to RCE

Priority HIGH 73CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.

Summary

JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff in the Git History tab. This issue is fixed in version 0.54.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00529 44th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial jupyterlab-git (jupyterlab): 0.54.0jupyterlab-git (PyPI): 0.54.0+2 more productsRed Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
jupyterlabjupyterlab-git0.30.0b3 to before 0.54.00.54.0Patch availableCNA
—jupyterlab-git (PyPI)0.30.0b3 to before 0.54.00.54.0Patch availableGHSA-f962-v9hr-pfg5
—jupyterlab-git-core (PyPI)0.30.0b3 to before 0.54.00.54.0Patch availableGHSA-f962-v9hr-pfg5
—@jupyterlab/git (npm)0.30.0-beta.3 to before 0.54.00.54.0Patch availableGHSA-f962-v9hr-pfg5
  • jupyterlab-git Vendorjupyterlab Affected 0.30.0b3 to before 0.54.0 Fixed in 0.54.0 Patch available CNA
  • jupyterlab-git (PyPI) Vendor— Affected 0.30.0b3 to before 0.54.0 Fixed in 0.54.0 Patch available GHSA-f962-v9hr-pfg5
  • jupyterlab-git-core (PyPI) Vendor— Affected 0.30.0b3 to before 0.54.0 Fixed in 0.54.0 Patch available GHSA-f962-v9hr-pfg5
  • @jupyterlab/git (npm) Vendor— Affected 0.30.0-beta.3 to before 0.54.0 Fixed in 0.54.0 Patch available GHSA-f962-v9hr-pfg5

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:jupyter:jupyterlab-git:*:*:*:*:*:*:*:*0.30.1 to before 0.54.0Vulnerablejupyterlab
cpe:2.3:a:jupyter:jupyterlab-git:0.30.0:-:*:*:*:*:*:*0.30.0Vulnerablejupyterlab
cpe:2.3:a:jupyter:jupyterlab-git:0.30.0:beta3:*:*:*:*:*:*0.30.0 beta3Vulnerablejupyterlab
  • cpe:2.3:a:jupyter:jupyterlab-git:*:*:*:*:*:*:*:* Versions 0.30.1 to before 0.54.0 Vulnerable ·jupyterlab
  • cpe:2.3:a:jupyter:jupyterlab-git:0.30.0:-:*:*:*:*:*:* Versions 0.30.0 Vulnerable ·jupyterlab
  • cpe:2.3:a:jupyter:jupyterlab-git:0.30.0:beta3:*:*:*:*:*:* Versions 0.30.0 beta3 Vulnerable ·jupyterlab

Remediation

  • Fix · CNA jupyterlab-git (jupyterlab) Fixed in 0.54.0
  • Fix · GHSA-f962-v9hr-pfg5 jupyterlab-git (PyPI) Fixed in 0.54.0 Advisory →
  • Fix · GHSA-f962-v9hr-pfg5 jupyterlab-git-core (PyPI) Fixed in 0.54.0 Advisory →
  • Fix · GHSA-f962-v9hr-pfg5 @jupyterlab/git (npm) Fixed in 0.54.0 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Not affected: 1 product
  • Red Hat OpenShift AI (RHOAI)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-54527
  2. 2026-10-03 Alias added: GHSA-f962-v9hr-pfg5
  3. 2026-10-24 Affected versions changed · Red Hat
  4. 2026-10-24 CVSS score added · Red Hat

References

Exploit 1

Patch 1

Advisory 2

Other 6

  • TI-2026-39373 jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories CVSS 3.1HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences