Threats tagged 'brew-jupyterlab-cve-2024-52804'

CVE-2024-52804 is a denial-of-service vulnerability in the HTTP cookie parsing algorithm of Tornado used by JupyterLab. Versions of JupyterLab from 1.2.0 up to but not including 4.3.1_1 are affected. The vulnerability arises because the cookie parsing algorithm can exhibit quadratic time complexity when processing specially crafted cookie headers, causing excessive CPU usage and blocking the event loop thread. This can lead to denial of service by preventing the processing of other requests. A fix is available in version 4.3.1_1.