Avivkeller

**Name of the Vulnerable Software and Affected Versions** JupyterLab extension template versions prior to 4.3.0 **Description** The JupyterLab extension template has a remote code execution (RCE) vulnerability in the `update-integration-tests.yml` workflow. This issue affects repositories created using the template with the `test` option. Extension authors are advised to upgrade the template to the latest version. Users who have modified the `update-integration-tests.yml` file should accept overwriting of this file and reapply their changes later. It is recommended to temporarily disable GitHub Actions while working on the upgrade and to rebase all open pull requests from untrusted users. **Recommendations** For versions prior to 4.3.0, upgrade the template to the latest version, overwriting the `update-integration-tests.yml` file if necessary, and reapply any changes made to this file later. As a temporary workaround, consider disabling GitHub Actions until the upgrade is complete. Restrict access to untrusted users' pull requests and rebase them to ensure actions run with the updated version.

**Name of the Vulnerable Software and Affected Versions** GoCD versions 19.4.0 through 23.5.0 **Description** The issue is a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a `redirect to` query parameter with inadequate validation. Attackers could theoretically abuse the query parameter to steal session tokens or other values from the user's browser. However, exploiting this to perform privileged actions is likely rather difficult because the target user would need to be triggered to open an attacker-crafted link in the period where the server is starting up. Additionally, GoCD server restarts invalidate earlier session tokens, so a stolen session token would be unusable once the server has completed restart. **Recommendations** For GoCD versions 19.4.0 through 23.5.0, consider updating to GoCD 24.1.0 to resolve the issue. As a temporary workaround for earlier GoCD versions, start GoCD with the Java system property override as either `-Dloading.page.resource.path=/loading pages/default.loading.page.html` or `-Dloading.page.resource.path=/does not exist.html` to override the loading page with an earlier version which is not vulnerable.

**Name of the Vulnerable Software and Affected Versions** YARD versions prior to 0.9.36 **Description** The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability stems from mishandling user-controlled data retrieved from the URL hash in the embedded JavaScript code within the "frames.erb" template file. The script lacks proper sanitization of the hash data before utilizing it to establish the top-level window's location, permitting an attacker to inject malicious JavaScript payloads through carefully crafted URLs. **Recommendations** For versions prior to 0.9.36, update to version 0.9.36 to fix the vulnerability. As a temporary workaround, consider disabling the JavaScript code within the "frames.erb" template file until a patch is available. Restrict access to the "frames.html" file to minimize the risk of exploitation. Avoid using the `window.location.hash` variable in the affected JavaScript code until the issue is resolved.