Threats tagged 'brew-jupyterlab-cve-2026-103263'

A path traversal vulnerability in Tornado's StaticFileHandler allows unauthenticated attackers to read arbitrary files on the server by exploiting symbolic links inside the static root directory. This occurs because the handler uses os.path.abspath() which does not resolve symlinks when validating paths, enabling attackers to access files outside the intended directory. The vulnerability affects applications serving user-uploaded content or using build pipelines that create symlinks in the static directory. A fix is available in Tornado version 4.6.4.