jupyter-server vulnerabilities (Alpine)

6 vulnerabilities.

• jupyter-server Alpine jupyter-server authentication cookies remain valid after password reset due to static cookie secret CVE-2026-40934 Fix available 7.6 HighMay 5, 2026
• jupyter-server Alpine jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat CVE-2026-40110 Fix available 7.6 HighMay 5, 2026
• jupyter-server Alpine jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix CVE-2026-35397 Public exploitFix available 7.6 HighMay 5, 2026
• jupyter-server Alpine jupyter_server next parameter open redirect can redirect users to external domains CVE-2025-61669 Fix available 6.3 MediumMay 5, 2026
• jupyter-server Alpine Open Redirect Vulnerability in jupyter-server CVE-2023-39968 Fix available 4.3 MediumAugust 28, 2023
• jupyter-server Alpine cross-site inclusion (XSSI) of files in jupyter-server CVE-2023-40170 Fix available 4.6 MediumAugust 28, 2023