Vulnerability Description
JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in commit history, allowing a crafted filename to execute JavaScript when a victim views the rename diff in the Git History tab. This issue is fixed in version 0.54.0.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jupyter | Jupyterlab-Git | >= 0.30.1, < 0.54.0 |
Related Weaknesses (CWE)
References
- https://github.com/jupyterlab/jupyterlab-git/commit/c6d37b88f36aa59aee317930b95ePatch
- https://github.com/jupyterlab/jupyterlab-git/releases/tag/v0.54.0Release Notes
- https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-f962-v9hr-ExploitMitigationVendor Advisory
- https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-f962-v9hr-ExploitMitigationVendor Advisory
FAQ
What is CVE-2026-54527?
CVE-2026-54527 is a vulnerability with a CVSS score of 9.0 (CRITICAL). JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTextDiff.ts createHeader() method passes Git filenames directly to innerHTML when rendering renamed files in com...
How severe is CVE-2026-54527?
CVE-2026-54527 has been rated CRITICAL with a CVSS base score of 9.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-54527?
Check the references section above for vendor advisories and patch information. Affected products include: Jupyter Jupyterlab-Git.