Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3853
  • PyPI/jupyterhub
 JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login 10 Sep
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-p43p-whwx-q52h
  • PyPI/jupyterhub
 JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login 25 Aug
  • Fix available
  • Severity - 5.3 (Medium)
PYSEC-2026-2533
  • PyPI/jupyterhub-ltiauthenticator
 LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) 13 Jul
  • Fix available
  • Severity - 5.9 (Medium)
PYSEC-2026-1480
  • PyPI/jupyterhub
 Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing 07 Jul
  • Fix available
  • Severity - 8.1 (High)
PYSEC-2026-647
  • PyPI/jupyterhub
 Open Redirect vulnerability in jupyterhub and notebook 02 Jul
  • Fix available
  • Severity - 6.1 (Medium)
PYSEC-2026-2189
  • PyPI/jupyterhub
 See record for full details 22 May
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-m68r-v472-jgq9
  • PyPI/jupyterhub
 JupyterHub has cross-origin form POSTs bypass XSRF (CWE-352) 05 May
  • Fix available
  • Severity - 5.4 (Medium)
PYSEC-2026-2188
  • PyPI/jupyterhub
 See record for full details 03 Apr
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-8mxq-7xr7-2fxj
  • PyPI/jupyterhub-ltiauthenticator
 LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) 03 Apr
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-3vff-hjqv-m7h8
  • PyPI/jupyterhub
 JupyterHub has an Open Redirect Vulnerability 03 Apr
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-mcgx-2gcr-p3hp
  • PyPI/jupyterhub-ltiauthenticator
 LTI JupyterHub Authenticator does not properly validate JWT Signature 25 Feb 2025
  • Fix available
  • Severity - 10.0 (Critical)
PYSEC-2025-120
  • PyPI/jupyterhub-ltiauthenticator
 See record for full details 25 Feb 2025
  • No fix available
  • Severity - 9.8 (Critical)
PYSEC-2024-200
  • PyPI/jupyterhub
  • github.com/jupyterhub/jupyterhub
 See record for full details 08 Aug 2024
  • Fix available
  • Severity - 7.2 (High)
GHSA-9x4q-3gxw-849f
  • PyPI/jupyterhub
 JupyterHub has a privilege escalation vulnerability with the `admin:users` scope 08 Aug 2024
  • Fix available
  • Severity - 8.6 (High)
PYSEC-2024-236
  • PyPI/jupyter-server-proxy
  • github.com/jupyterhub/jupyter-server-proxy
 See record for full details 11 Jun 2024
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-7r3h-4ph8-w38g
  • PyPI/jupyterhub
 Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing 28 Mar 2024
  • Fix available
  • Severity - 8.1 (High)
Load more...