Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| jupyterlab | pip | >= 4.6.0, <= 4.6.1 | 4.6.2 |
| jupyterlab | pip | >= 3.3.0, <= 4.5.9 | 4.5.10 |
Miggo AIRoot Cause AnalysisThe vulnerability is a DOM-based Cross-Site Scripting (XSS) issue in JupyterLab's notebook extension. The analysis of the provided patches (commits be9303f5b and f1beab4a2) reveals the root cause. The activateNotebookHandler function in packages/notebook-extension/src/index.ts was responsible for applying custom styling based on user settings, specifically for side-by-side notebook rendering. It would read the sideBySideLeftMarginOverride and sideBySideRightMarginOverride values and dynamically create a <style> element. The vulnerability existed because the function used insertAdjacentHTML and innerText to inject the constructed style string directly into the DOM without proper validation or sanitization. An attacker could craft a malicious overrides.json file with a payload in these setting values (e.g., 10px;}</style><script>alert(1)</script>). When a user imports this file, the activateNotebookHandler function would execute, injecting and running the malicious script in the context of the user's JupyterLab session. The patch mitigates this by switching to the safer textContent property, which does not parse the string as HTML, and by adding a regex pattern in the tracker.json schema to validate the format of the margin values, preventing non-CSS values from being saved.
activateNotebookHandlerpackages/notebook-extension/src/index.ts