Security Advisory
CVE-2021-39906
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper validation of ipynb files in GitLab CE/EE version 13.5 and above allows an attacker to execute arbitrary JavaScript code on the victims behalf.