JU
Product
Jupyterhub
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 5Low 0
Watch
Add Jupyterhub to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41247 | 7.5 | Nov 4 | JupyterHub is an open source multi-user server for Jupyter notebooks Affected: 1.0.0 before 1.5.0 |
| CVE-2024-41942 | 7.2 | Aug 8 | JupyterHub has a privilege escalation vulnerability with the `admin:users` scope Affected: before 4.1.6; 5.0.0; 5.0.0; 5.0.0 |
| CVE-2026-33709 | 6.1 | Apr 3 | JupyterHub has an Open Redirect Vulnerability Affected: before 5.4.4 |
| CVE-2024-28233 | 6.1 | Mar 27 | XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing Affected: before 4.1.0 |
| CVE-2019-10255 | 6.1 | Mar 28 | An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login… Affected: before 0.9.5 |
| CVE-2020-36191 | 4.5 | Jan 13 | JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account) Affected: 1.1.0 |
| CVE-2026-40864 | 4.3 | May 22 | JupyterHub: Cross-origin form POSTs bypass XSRF Affected: 4.1.0 before 5.4.5 |
Showing 7