Skip to contentJupyter Server vulnerabilities
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 moreJupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPCVE-2026-44727Fix available9.3 Critical
- jupyter server, jupyter/jupyter +1 moreCORS Origin Validation Bypass in jupyter-serverCVE-2026-66576.1 Medium
- jupyter jupyter/jupyter, server +1 morePath Traversal in jupyter/jupyterCVE-2026-5422Fix available6.8 Medium
- jupyter server, jupyter-server jupyter server +1 morejupyter-server authentication cookies remain valid after password reset due to static cookie secretCVE-2026-40934Fix available7.6 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +1 more +3 morejupyter-server CORS origin validation bypass via unanchored regex in allow_origin_patCVE-2026-40110Fix available7.6 High
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 morejupyter-server path traversal allows access to sibling directories sharing root_dir name prefixCVE-2026-35397Public exploitFix available7.6 High
- jupyter server, jupyter-server jupyter server +1 morejupyter_server next parameter open redirect can redirect users to external domainsCVE-2025-61669Fix available6.3 Medium
- jupyter server proxy, jupyterhub jupyter-server-proxy, jupyter server proxy +2 moreJupyter Server Proxy has a reflected XSS issue in host parameterCVE-2024-35225Fix available9.7 Critical
- jupyter server, jupyter-server jupyter server +1 moreJupyter server on Windows discloses Windows user password hashCVE-2024-35178Fix available7.5 High
- jupyter server proxy, jupyterhub jupyter-server-proxy +1 moreJupyter Server Proxy's Websocket Proxying does not require authenticationCVE-2024-28179Fix available9.1 Critical
- jupyter server, jupyter-server jupyter server +1 moreJupyter Server errors include tracebacks with path informationCVE-2023-49080Fix available3.5 Low
- jupyter server, jupyter-server jupyter server +1 moreOpen Redirect Vulnerability in jupyter-serverCVE-2023-39968Fix available4.3 Medium
- jupyter server, jupyter-server jupyter server +1 morecross-site inclusion (XSSI) of files in jupyter-serverCVE-2023-40170Fix available4.6 Medium
- jupyter server, jupyter-server jupyter server +1 moreKnown or guessable hidden files may be accessed in Jupyter ServerCVE-2022-29241Fix available7.1 High
- jupyter server, jupyter-server jupyter server +1 moreSensitive Auth & Cookie data stored in Jupyter server logsCVE-2022-24757Fix available7.5 High
- jupyter server proxy, jupyterhub jupyter-server-proxy +1 moreSSRF vulnerability (requires authentication)CVE-2022-21697Fix available6.3 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect vulnerabilityCVE-2020-26275Fix available6.1 Medium
- jupyter server, jupyter-server jupyter server +1 moreOpen redirect in Jupyter ServerCVE-2020-26232Fix available4.1 Medium