Login Request a demo
JS
Product
Jupyter Server
by Jupyter · last CVE Jun 22, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 7Medium 8Low 0
Severity
All severities15Critical0High7Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jupyter Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40934
6.8
0%
May 5
jupyter-server authentication cookies remain valid after password reset due to static cookie secret
Affected: before 2.18.0
CVE-2025-61669
6.1
0%
May 5
jupyter_server next parameter open redirect can redirect users to external domains
Affected: before 2.18.0
CVE-2023-40170
6.1
1%
Aug 28
jupyter-server is the backend for Jupyter web applications
Affected: before 2.7.2
CVE-2023-39968
6.1
1%
Aug 28
jupyter-server is the backend for Jupyter web applications
Affected: before 2.7.2
CVE-2020-26275
6.1
1%
Dec 21
The Jupyter Server provides the backend (i.e
Affected: before 1.1.1
CVE-2026-44727
5.4
0%
Jun 22
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Affected: before 2.20.0
CVE-2020-26232
5.4
1%
Nov 24
Jupyter Server before version 1.0.6 has an Open redirect vulnerability
Affected: before 1.0.6
CVE-2023-49080
4.3
1%
Dec 4
The Jupyter Server provides the backend (i.e
Affected: before 2.11.2
Showing 8