GitLab’s Notebook Feature Exposed a Hidden Parser Trap

A review workflow for Jupyter notebooks became a potential server-side execution path, showing how one untrusted file format can become dangerous when a native parser sits in the middle.