Threats tagged 'brew-jupyterlab-cve-2026-49855'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2026-49855Jupyterlab · tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) High7.5EPSS 0.6%2026-08-13GCVE DatabaseCVE-2026-49855 A vulnerability in JupyterLab's use of Tornado's AsyncHTTPClient allows a malicious server to cause excessive memory consumption via decompressed gzip chunks without a size limit. This can lead to denial of service due to resource exhaustion. The issue affects versions from 1.2.0 up to but not including 4.5.8 and is fixed in version 4.5.8. EPSS 0.6%Report on CVE-2026-49855 Vulnerability #brew-jupyterlab-cve-2026-49855 #homebrew	GCVE Database	2026-08-13

Page 1 of 1