Login Request a demo
JU
Product
Jupyterhub
by Jupyter · last CVE May 22, 2026
7
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 2Medium 5Low 0
Severity
All severities7Critical0High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jupyterhub to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33709
6.1
0%
Apr 3
JupyterHub has an Open Redirect Vulnerability
Affected: before 5.4.4
CVE-2024-28233
6.1
0%
Mar 27
XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing
Affected: before 4.1.0
CVE-2019-10255
6.1
2%
Mar 28
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login…
Affected: before 0.9.5
CVE-2020-36191
4.5
1%
Jan 13
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account)
Affected: 1.1.0
CVE-2026-40864
4.3
0%
May 22
JupyterHub: Cross-origin form POSTs bypass XSRF
Affected: 4.1.0 before 5.4.5
Showing 5