Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4054
  • PyPI/jupyter-server
 Jupyter Server: 5xx request logging leaks token-bearing Referer header values yesterday
  • Fix available
  • Severity - 7.1 (High)
OESA-2026-4164
  • openEuler:24.03-LTS-SP1/python-jupyter-server
 python-jupyter-server security update 2 days ago
  • Fix available
  • Severity - 8.8 (High)
OESA-2026-4165
  • openEuler:24.03-LTS-SP3/python-jupyter-server
 python-jupyter-server security update 2 days ago
  • Fix available
  • Severity - 8.8 (High)
OESA-2026-4080
  • openEuler:24.03-LTS-SP4/python-jupyter-server
 python-jupyter-server security update 25 Sep
  • Fix available
  • Severity - 8.8 (High)
OESA-2026-3956
  • openEuler:24.03-LTS-SP4/python-jupyter-server
 python-jupyter-server security update 20 Sep
  • Fix available
  • Severity - 9.3 (Critical)
OESA-2026-3954
  • openEuler:24.03-LTS-SP1/python-jupyter-server
 python-jupyter-server security update 20 Sep
  • Fix available
  • Severity - 9.3 (Critical)
OESA-2026-3955
  • openEuler:24.03-LTS-SP3/python-jupyter-server
 python-jupyter-server security update 20 Sep
  • Fix available
  • Severity - 9.3 (Critical)
DEBIAN-CVE-2026-86049
  • Debian:12/jupyter-server
  • Debian:13/jupyter-server
  • Debian:14/jupyter-server
 See record for full details 17 Sep
  • No fix available
  • Severity - 7.1 (High)
UBUNTU-CVE-2026-86049
  • Ubuntu:22.04:LTS/jupyter-server
  • Ubuntu:24.04:LTS/jupyter-server
  • Ubuntu:26.04:LTS/jupyter-server
 See record for full details 17 Sep
  • No fix available
  • Severity - 7.1 (High)
GHSA-c3mw-737p-c7g2
  • PyPI/jupyter-server
 Jupyter Server: 5xx request logging leaks token-bearing Referer header values 17 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-86049
  • github.com/jupyter-server/jupyter_server
 Jupyter Server: 5xx request logging leaks token-bearing Referer header values 17 Sep
  • Fix available
  • Severity - 7.1 (High)
PYSEC-2026-3472
  • PyPI/jupyter-server
 jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used 23 Jul
  • No fix available
  • Severity - 6.1 (Medium)
CVE-2026-44182
  • github.com/jupyter-server/enterprise_gateway
 Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering 16 Jul
  • Fix available
  • Severity - 10.0 (Critical)
CVE-2026-44181
  • github.com/jupyter-server/enterprise_gateway
 Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution 16 Jul
  • Fix available
  • Severity - 10.0 (Critical)
CVE-2026-44180
  • github.com/jupyter-server/enterprise_gateway
 Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed 16 Jul
  • Fix available
  • Severity - 9.8 (Critical)
PYSEC-2026-2532
  • PyPI/jupyter-server
 Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path() 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
Load more...