제출 #873738: github jupyterlab-git Release-v1.9_cuda-12.6_ubuntu-24.04 https://github.com/iot-salzburg/gpu-jupyter/blob/20efdb2e9a3f4f0정보

제목github jupyterlab-git Release-v1.9_cuda-12.6_ubuntu-24.04 https://github.com/iot-salzburg/gpu-jupyter/blob/20efdb2e9a3f4f0
설명# Stored XSS leading to Remote Code Execution Vulnerability in `gpu-jupyter` A stored cross-site scripting (XSS) vulnerability leading to remote code execution (RCE) exists in the `gpu-jupyter` project version `Release-v1.9_cuda-12.6_ubuntu-24.04`. [`gpu-jupyter`](https://github.com/iot-salzburg/gpu-jupyter) : GPU-accelerated JupyterLab with PyTorch, TensorFlow, and a rich data science toolstack for reproducible deep learning experiments. Docker Hub pulls: 505,000+. The project pins a vulnerable version of `jupyterlab-git==0.51.0` in line `541` of the `.build/Dockerfile`. This version contains a stored XSS vulnerability (CVE-2026-54527) in the `PlainTextDiff.ts` component. The `createHeader()` method at line `221` passes Git filenames directly to `innerHTML` without sanitization when rendering diffs for renamed files in commit history. Since git allows arbitrary characters in filenames (including HTML/JavaScript), an attacker can craft a filename containing malicious JavaScript that executes when another user views the rename diff in the Git History tab. Because gpu-jupyter runs JupyterLab as `root` with full kernel access, the XSS can escalate to Remote Code Execution by calling the Jupyter Kernel API from the browser context — starting a kernel and executing arbitrary OS commands on the server. In the vulnerability replication environment, a Docker container running the same `jupyterlab-git==0.51.0` version as gpu-jupyter is used. A malicious git repository with a crafted rename commit triggers the XSS when viewing the diff.
원천⚠️ https://github.com/jiy2020/Stored-XSS-leading-to-Remote-Code-Execution-Vulnerability-in-gpu-jupyter-
사용자
 CLJY (UID 46916)
제출2026. 06. 30. AM 03:45 (3 개월 ago)
모더레이션2026. 07. 26. PM 06:04 (27 days later)
상태중복
VulDB 항목377029 [jupyterlab Git Plugin 까지 0.53.x Git History Tab PlainTextDiff.ts createHeader filename 크로스 사이트 스크립팅]
포인트들0

◂ 이전개요다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!