Threats Tagged 'ghsa-pppj-hq3g-57pj'
View all threats tagged with 'ghsa-pppj-hq3g-57pj'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-pppj-hq3g-57pj'
Click on any threat for detailed analysis and mitigation recommendations
JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`) 0 JupyterLab versions 3.3.0 through before 4.5.10 and 4.6.0 through before 4.6.2 contain a vulnerability where crafted settings files (overrides.json) can execute code when imported or automatically loaded. This cross-site scripting (XSS) flaw arises because certain notebook display settings are not properly validated, allowing embedded code execution with the user's privileges. Attackers with write access to shared settings directories can plant malicious files applied automatically, while users can also be tricked into importing malicious settings files. The vulnerability enables attackers to read, modify notebooks and files, and execute code on behalf of the user. Official patches are available in versions 4.5.10 and 4.6.2. No workarounds exist, but administrators should restrict write permissions on shared settings directories and establish trusted configuration distribution processes. Join the discussion | GCVE Database | 07/22/2026, 23:16:18 UTC Added: 07/23/2026, 01:18:03 UTC |
Showing 1 to 1 of 1 result