{"action":"Upgrade jupyterlab-git to 0.51.1 or later.","affected":[{"fixed":"0.51.1","introduced":"0"}],"component":"jupyterlab-git","cve_ids":["CVE-2025-30370"],"ecosystem":"PyPI","epss":0.00585,"exploited":false,"fixed_versions":["0.51.1"],"ghsa_id":"GHSA-cj5w-8mjf-r5f8","id":"tcs_01M5KGSWAR6JTZ9X00XZPVQCQK","modified_at":"2026-07-07T17:46:13.963271480Z","published_at":"2026-07-07T16:02:50.789127Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1483","https://github.com/jupyterlab/jupyterlab-git/security/advisories/GHSA-cj5w-8mjf-r5f8","https://nvd.nist.gov/vuln/detail/CVE-2025-30370","https://github.com/jupyterlab/jupyterlab-git/pull/1196","https://github.com/jupyterlab/jupyterlab-git/commit/b46482993f76d3a546015c6a94ebed8b77fc2376","https://github.com/jupyterlab/jupyterlab-git","https://github.com/jupyterlab/jupyterlab-git/blob/7eb3b06f0092223bd5494688ec264527bbeb2195/src/commandsAndMenu.tsx#L175-L184","https://pypi.org/project/jupyterlab-git","https://github.com/advisories/GHSA-cj5w-8mjf-r5f8"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1483","url":"https://osv.dev/vulnerability/PYSEC-2026-1483"}],"summary":"jupyterlab-git has a command injection vulnerability in \"Open Git Repository in Terminal\""}