jupyter-server vulnerabilities (PyPI)
17 vulnerabilities.
-
jupyter-serverPyPI Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization 8.8 High -
jupyter-serverPyPI Jupyter Server: 5xx request logging leaks token-bearing Referer header values 7.1 High -
jupyter-serverPyPI Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP 9.3 Critical -
jupyter-serverPyPI CORS Origin Validation Bypass in jupyter-server 6.1 Medium -
jupyter-serverPyPI Path Traversal in jupyter/jupyter 6.8 Medium -
jupyter-serverPyPI jupyter-server authentication cookies remain valid after password reset due to static cookie secret 7.6 High -
jupyter-serverPyPI jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat 7.6 High -
jupyter-serverPyPI jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix 7.6 High -
jupyter-serverPyPI jupyter_server next parameter open redirect can redirect users to external domains 6.3 Medium -
jupyter-serverPyPI Jupyter server on Windows discloses Windows user password hash 7.5 High -
jupyter-serverPyPI Jupyter Server errors include tracebacks with path information 3.5 Low -
jupyter-serverPyPI Open Redirect Vulnerability in jupyter-server 4.3 Medium -
jupyter-serverPyPI cross-site inclusion (XSSI) of files in jupyter-server 4.6 Medium -
jupyter-serverPyPI Known or guessable hidden files may be accessed in Jupyter Server 7.1 High -
jupyter-serverPyPI Sensitive Auth & Cookie data stored in Jupyter server logs 7.5 High -
jupyter-serverPyPI Open redirect vulnerability 6.1 Medium -
jupyter-serverPyPI Open redirect in Jupyter Server 4.1 Medium