JU
Product
jupyter_server
9
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add jupyter_server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114135 | 8.8 | Oct 21 | Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization Affected: >= 2.0.0, < 2.6.0 |
| CVE-2026-35397 | 8.8 | May 5 | jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix Affected: < 2.18.0 |
| CVE-2024-35178 | 7.5 | Jun 6 | Jupyter server on Windows discloses Windows user password hash Affected: < 2.14.1 |
| CVE-2026-40110 | 7.3 | May 5 | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat Affected: <= 2.17.0 |
| CVE-2026-86049 | 7.1 | Sep 17 | Jupyter Server: 5xx request logging leaks token-bearing Referer header values Affected: < 2.21.0 |
Showing 5