Skip to contentJupyter-server Jupyter Server vulnerabilities
- jupyter-server jupyter serverJupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationCVE-2026-114135Fix available8.8 High
- jupyter-server jupyter serverJupyter Server: 5xx request logging leaks token-bearing Referer header valuesCVE-2026-86049Fix available7.1 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 moreJupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPCVE-2026-44727Fix available9.3 Critical
- jupyter server, jupyter-server jupyter server +1 morejupyter-server authentication cookies remain valid after password reset due to static cookie secretCVE-2026-40934Fix available7.6 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +1 more +3 morejupyter-server CORS origin validation bypass via unanchored regex in allow_origin_patCVE-2026-40110Fix available7.6 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 morejupyter-server path traversal allows access to sibling directories sharing root_dir name prefixCVE-2026-35397Public exploitFix available7.6 High
- jupyter server, jupyter-server jupyter server +1 morejupyter_server next parameter open redirect can redirect users to external domainsCVE-2025-61669Fix available6.3 Medium
- jupyter server, jupyter-server jupyter server +1 moreJupyter server on Windows discloses Windows user password hashCVE-2024-35178Fix available7.5 High
- jupyter server, jupyter-server jupyter server +1 moreJupyter Server errors include tracebacks with path informationCVE-2023-49080Fix available3.5 Low
- jupyter server, jupyter-server jupyter server +1 moreOpen Redirect Vulnerability in jupyter-serverCVE-2023-39968Fix available4.3 Medium
- jupyter server, jupyter-server jupyter server +1 morecross-site inclusion (XSSI) of files in jupyter-serverCVE-2023-40170Fix available4.6 Medium
- jupyter server, jupyter-server jupyter server +1 moreKnown or guessable hidden files may be accessed in Jupyter ServerCVE-2022-29241Fix available7.1 High
- jupyter server, jupyter-server jupyter server +1 moreSensitive Auth & Cookie data stored in Jupyter server logsCVE-2022-24757Fix available7.5 High
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect vulnerabilityCVE-2020-26275Fix available6.1 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect in Jupyter ServerCVE-2020-26232Fix available4.1 Medium