Threats tagged 'brew-jupyterlab-ghsa-8423-8fgw-73vq'

A vulnerability in JupyterLab's multipart form data parsing allows an attacker to cause a denial of service (DoS) by triggering excessive memory usage. The function parse_multipart_form_data splits the input data into a large list before checking the number of parts, leading to transient memory amplification. This can be exploited pre-authentication by sending a crafted HTTP request with many parts, causing high memory consumption and potential service disruption. The issue affects versions from 1.2.0 up to but not including 4.6.3 and has been fixed in version 4.6.3.