Vulnerability Database

openSUSE-SU-2026:12012-1

openSUSE:Tumbleweed/python-jupyter-server

python313-jupyter-server-2.20.0-1.3 on GA media 2 days ago

Fix available

PYSEC-2026-4054

PyPI/jupyter-server

Jupyter Server: 5xx request logging leaks token-bearing Referer header values 4 days ago

Fix available
Severity - 7.1 (High)

OESA-2026-4164

openEuler:24.03-LTS-SP1/python-jupyter-server

python-jupyter-server security update 5 days ago

Fix available
Severity - 8.8 (High)

OESA-2026-4165

openEuler:24.03-LTS-SP3/python-jupyter-server

python-jupyter-server security update 5 days ago

Fix available
Severity - 8.8 (High)

OESA-2026-4080

openEuler:24.03-LTS-SP4/python-jupyter-server

python-jupyter-server security update 25 Sep

Fix available
Severity - 8.8 (High)

OESA-2026-3956

openEuler:24.03-LTS-SP4/python-jupyter-server

python-jupyter-server security update 20 Sep

Fix available
Severity - 9.3 (Critical)

OESA-2026-3954

openEuler:24.03-LTS-SP1/python-jupyter-server

python-jupyter-server security update 20 Sep

Fix available
Severity - 9.3 (Critical)

OESA-2026-3955

openEuler:24.03-LTS-SP3/python-jupyter-server

python-jupyter-server security update 20 Sep

Fix available
Severity - 9.3 (Critical)

DEBIAN-CVE-2026-86049

Debian:12/jupyter-server
Debian:13/jupyter-server
Debian:14/jupyter-server

See record for full details 17 Sep

No fix available
Severity - 7.1 (High)

UBUNTU-CVE-2026-86049

Ubuntu:22.04:LTS/jupyter-server
Ubuntu:24.04:LTS/jupyter-server
Ubuntu:26.04:LTS/jupyter-server

See record for full details 17 Sep

No fix available
Severity - 7.1 (High)

GHSA-c3mw-737p-c7g2

PyPI/jupyter-server

Jupyter Server: 5xx request logging leaks token-bearing Referer header values 17 Sep

Fix available
Severity - 7.1 (High)

CVE-2026-86049

github.com/jupyter-server/jupyter_server

Jupyter Server: 5xx request logging leaks token-bearing Referer header values 17 Sep

Fix available
Severity - 7.1 (High)

PYSEC-2026-3472

PyPI/jupyter-server

jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used 23 Jul

No fix available
Severity - 6.1 (Medium)

CVE-2026-44182

github.com/jupyter-server/enterprise_gateway

Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering 16 Jul

Fix available
Severity - 10.0 (Critical)

CVE-2026-44181

github.com/jupyter-server/enterprise_gateway

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution 16 Jul

Fix available
Severity - 10.0 (Critical)

CVE-2026-44180

github.com/jupyter-server/enterprise_gateway

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed 16 Jul

Fix available
Severity - 9.8 (Critical)

Vulnerabilities