Skip to contentJupyter Jupyterhub vulnerabilities
- jupyter jupyterhubJupyterHub: Cross-origin form POSTs bypass XSRFCVE-2026-40864Public exploitFix available5.4 Medium
- jupyter lti jupyterhub authenticator, jupyterhub ltiauthenticator +1 moreLTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)CVE-2026-34052Fix available5.9 Medium
- jupyter jupyterhubJupyterHub has an Open Redirect VulnerabilityCVE-2026-33709Fix available5.1 Medium
- jupyterhub ltiauthenticator, jupyter lti jupyterhub authenticator +1 moreJupyterHub's LTI13Authenticator: JWT signature not validatedCVE-2023-25574Fix available10.0 Critical
- jupyter jupyterhubJupyterHub has a privilege escalation vulnerability with the `admin:users` scopeCVE-2024-41942Fix available7.2 High
- jupyter jupyterhubXSS in JupyterHub via Self-XSS leveraged by Cookie TossingCVE-2024-28233Fix available8.1 High
- jupyter jupyterhubincomplete logout in JupyterHubCVE-2021-41247Fix available3.5 Low
- jupyter jupyterhubCross-Site Request Forgery in JupyterHubCVE-2020-36191Fix available4.5 Medium
- jupyter jupyterhub, notebook +1 moreOpen Redirect vulnerability in jupyterhub and notebookCVE-2019-10255Fix available6.1 Medium