Login Request a demo
JU
Product
jupyter_server
by jupyter-server · last CVE Oct 21, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 5Medium 4Low 0
Severity
All severities9Critical0High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jupyter_server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40934
6.8
0%
May 5
jupyter-server authentication cookies remain valid after password reset due to static cookie secret
Affected: < 2.18.0
CVE-2025-61669
6.1
0%
May 5
jupyter_server next parameter open redirect can redirect users to external domains
Affected: <= 2.17.0
CVE-2026-44727
5.4
0%
Jun 22
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Affected: < 2.20
CVE-2023-49080
4.3
1%
Dec 4
Jupyter Server errors include tracebacks with path information
Affected: < 2.11.2
Showing 4