Threats tagged 'brew-jupyterlab-cve-2025-67726'

A high-severity vulnerability in Tornado's httputil.py _parseparam function causes quadratic CPU usage when parsing crafted multipart/form-data parameters. This can lead to a denial of service by making the server unresponsive due to its single event loop design. Versions of jupyterlab from 1.2.0 up to but not including 4.5.1 are affected. The issue is fixed in version 4.5.1.