Vulnerabilities for jupyterlab-git

First version without a known vulnerability: 0.54.0

Details

• GHSA-436q-jwfr-rm2h2026-06-19

  jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories

  Fixed in: 0.54.0

• GHSA-f962-v9hr-pfg52026-06-19

  jupyterlab-git extension: Stored XSS leading to RCE

  Fixed in: 0.54.0

• GHSA-cj5w-8mjf-r5f82025-04-04

  jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

  Fixed in: 0.51.1