jupyterhub vulnerabilities (Bitnami)

8 vulnerabilities.

• jupyterhub Bitnami JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen CVE-2026-108752 Fix available 2.3 LowOctober 11, 2026
• jupyterhub Bitnami JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login CVE-2026-54338 Fix available 5.3 MediumAugust 7, 2026
• jupyterhub Bitnami JupyterHub: Cross-origin form POSTs bypass XSRF CVE-2026-40864 Public exploitFix available 5.4 MediumMay 5, 2026
• jupyterhub Bitnami JupyterHub has an Open Redirect Vulnerability CVE-2026-33709 Fix available 5.1 MediumApril 3, 2026
• jupyterhub Bitnami JupyterHub has a privilege escalation vulnerability with the `admin:users` scope CVE-2024-41942 Fix available 7.2 HighAugust 8, 2024
• jupyterhub Bitnami XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing CVE-2024-28233 Fix available 8.1 HighMarch 27, 2024
• jupyterhub Bitnami incomplete logout in JupyterHub CVE-2021-41247 Fix available 3.5 LowNovember 4, 2021
• jupyterhub Bitnami Cross-Site Request Forgery in JupyterHub CVE-2020-36191 Fix available 4.5 MediumJanuary 13, 2021