jupyterhub vulnerabilities (PyPI)

8 vulnerabilities.

• jupyterhub PyPI JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login CVE-2026-54338 Fix available 5.3 MediumAugust 7, 2026
• jupyterhub PyPI JupyterHub: Cross-origin form POSTs bypass XSRF CVE-2026-40864 Public exploitFix available 5.4 MediumMay 5, 2026
• jupyterhub PyPI JupyterHub has an Open Redirect Vulnerability CVE-2026-33709 Fix available 5.1 MediumApril 3, 2026
• jupyterhub PyPI JupyterHub has a privilege escalation vulnerability with the `admin:users` scope CVE-2024-41942 Fix available 7.2 HighAugust 8, 2024
• jupyterhub PyPI XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing CVE-2024-28233 Fix available 8.1 HighMarch 27, 2024
• jupyterhub PyPI incomplete logout in JupyterHub CVE-2021-41247 Fix available 3.5 LowNovember 4, 2021
• jupyterhub PyPI Cross-Site Request Forgery in JupyterHub CVE-2020-36191 Fix available 4.5 MediumJanuary 13, 2021
• jupyterhub PyPI Open Redirect vulnerability in jupyterhub and notebook CVE-2019-10255 Fix available 6.1 MediumMarch 28, 2019