← Database

CVE-2021-39906

HIGH CVSS: 8.7 Published: 2021-11-05 Modified: 2026-06-17

Description

Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victim's behalf.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-79

References