Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

jupyter/nbclassic

              main @ 173fdfe
            

Fixes

CVEs

HIGH

Peak severity

100.0%

Coverage

Highlights

Cross-site Scripting (XSS): 4 prior fixes. Scrutinize any change in this area.

notebook/static/notebook/js/outputarea.js: most-fixed (3 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Cross-site Scripting (XSS): Custom Caja sanitizer replaced twice with JupyterLab defaultSanitizer, indicating the custom sanitizer was repeatedly bypassable and a single hardened implementation is required.

Stored XSS: Output area is the primary sink for untrusted notebook content; two separate stored XSS fixes (MathML and jQuery htmlPrefilter) show multiple injection paths through the same component.

Cross-site Scripting (XSS): LaTeX output was inserted via .append() without escaping, a direct DOM injection path distinct from the sanitizer-based fixes, showing inconsistent output handling.