[W 2026-05-22 18:27:55.399 ServerApp] ServerApp.token config is deprecated in 2.0. Use IdentityProvider.token.
[I 2026-05-22 18:27:55.413 ServerApp] jupyter_server_terminals | extension was successfully linked.
[W 2026-05-22 18:27:55.424 ServerApp] All authentication is disabled.  Anyone who can connect to this server will be able to run code.
[I 2026-05-22 18:27:55.425 ServerApp] jupyter_server_terminals | extension was successfully loaded.
[I 2026-05-22 18:27:55.427 ServerApp] The port 28895 is already in use, trying another port.
[I 2026-05-22 18:27:55.428 ServerApp] Serving notebooks from local directory: /root/.pruva/runs/cve-2026-35397_20260522-180936/tmp_variant_test/data
[I 2026-05-22 18:27:55.428 ServerApp] Jupyter Server 2.17.0 is running at:
[I 2026-05-22 18:27:55.428 ServerApp] http://localhost:28896/
[I 2026-05-22 18:27:55.428 ServerApp]     http://127.0.0.1:28896/
[I 2026-05-22 18:27:55.428 ServerAp[E 2026-05-22 18:27:59.133 ServerApp] Uncaught exception GET /api/contents/%2e%2e%2fdatasecret/secret.txt?content=1 (127.0.0.1)
    HTTPServerRequest(protocol='http', host='localhost:28895', method='GET', uri='/api/contents/%2e%2e%2fdatasecret/secret.txt?content=1', version='HTTP/1.1', remote_ip='127.0.0.1')
    Traceback (most recent call last):
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1880, in _execute
        result = await result
                 ^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/auth/decorator.py", line 73, in inner
        return await out
               ^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/services/contents/handlers.py", line 148, in get
        if not cm.allow_hidden and await ensure_async(cm.is_hidden(path)):
                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_core/utils/__init__.py", line 214, in ensure_async
        result = await obj
                 ^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/services/contents/filemanager.py", line 1095, in is_hidden
        return is_hidden(os_path, self.root_dir)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_core/paths.py", line 573, in is_hidden
        raise ValueError(_msg)
    ValueError: abs_path=PosixPath('/root/.pruva/runs/cve-2026-35397_20260522-180936/tmp_variant_test/datasecret/secret.txt') is not a subdirectory of abs_root=PosixPath('/root/.pruva/runs/cve-2026-35397_20260522-180936/tmp_variant_test/data'). abs_path must be within abs_root.
[W 2026-05-22 18:27:59.135 ServerApp] wrote error: 'Unhandled error'
    Traceback (most recent call last):
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1880, in _execute
        result = await result
                 ^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/auth/decorator.py", line 73, in inner
        return await out
               ^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/services/contents/handlers.py", line 148, in get
        if not cm.allow_hidden and await ensure_async(cm.is_hidden(path)):
                                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_core/utils/__init__.py", line 214, in ensure_async
        result = await obj
                 ^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/services/contents/filemanager.py", line 1095, in is_hidden
        return is_hidden(os_path, self.root_dir)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_core/paths.py", line 573, in is_hidden
        raise ValueError(_msg)
    ValueError: abs_path=PosixPath('/root/.pruva/runs/cve-2026-35397_20260522-180936/tmp_variant_test/datasecret/secret.txt') is not a subdirectory of abs_root=PosixPath('/root/.pruva/runs/cve-2026-35397_20260522-180936/tmp_variant_test/data'). abs_path must be within abs_root.
[E 2026-05-22 18:27:59.136 ServerApp] {
      "Host": "localhost:28895",
      "Accept": "*/*",
      "User-Agent": "curl/8.5.0"
    }
[E 2026-05-22 18:27:59.136 ServerApp] 500 GET /api/contents/%2e%2e%2fdatasecret/secret.txt?content=1 (2aaa630da29140a791f578a21dee62c8@127.0.0.1) 4.28ms referer=None
[W 2026-05-22 18:27:59.147 ServerApp] 403 POST /api/contents/%2e%2e%2fdatasecret/secret.txt/checkpoints (127.0.0.1): '_xsrf' argument missing from POST
[W 2026-05-22 18:27:59.148 ServerApp] wrote error: "'_xsrf' argument missing from POST"
    Traceback (most recent call last):
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1859, in _execute
        result = await result  # type: ignore
                 ^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 754, in prepare
        await super().prepare()
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 636, in prepare
        self.check_xsrf_cookie()
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 540, in check_xsrf_cookie
        return super().check_xsrf_cookie()
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1687, in check_xsrf_cookie
        raise HTTPError(403, "'_xsrf' argument missing from POST")
    tornado.web.HTTPError: HTTP 403: Forbidden ('_xsrf' argument missing from POST)
[W 2026-05-22 18:27:59.149 ServerApp] 403 POST /api/contents/%2e%2e%2fdatasecret/secret.txt/checkpoints (ef0317583ed341e1be72053d3514d8d4@127.0.0.1) 2.00ms referer=None
[W 2026-05-22 18:27:59.161 ServerApp] 403 PUT /api/contents/%2e%2e%2fdatasecret/written.txt (127.0.0.1): '_xsrf' argument missing from POST
[W 2026-05-22 18:27:59.161 ServerApp] wrote error: "'_xsrf' argument missing from POST"
    Traceback (most recent call last):
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1859, in _execute
        result = await result  # type: ignore
                 ^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 754, in prepare
        await super().prepare()
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 636, in prepare
        self.check_xsrf_cookie()
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/jupyter_server/base/handlers.py", line 540, in check_xsrf_cookie
        return super().check_xsrf_cookie()
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^
      File "/root/.pruva/runs/cve-2026-35397_20260522-180936/.jupyter_repro_venv/lib/python3.11/site-packages/tornado/web.py", line 1687, in check_xsrf_cookie
        raise HTTPError(403, "'_xsrf' argument missing from POST")
    tornado.web.HTTPError: HTTP 403: Forbidden ('_xsrf' argument missing from POST)
[W 2026-05-22 18:27:59.162 ServerApp] 403 PUT /api/contents/%2e%2e%2fdatasecret/written.txt (fb073ea486d64409b68b60df090a2de2@127.0.0.1) 1.49ms referer=None