JS
Product
Jupyter Server
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 8Low 0
Watch
Add Jupyter Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-6657 | 8.8 | Jun 3 | CORS Origin Validation Bypass in jupyter-server Affected: 1.12.0 through 2.17.0 |
| CVE-2026-35397 | 8.8 | May 5 | jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix Affected: before 2.18.0 |
| CVE-2022-29241 | 8.8 | Jun 14 | Jupyter Server provides the backend (i.e Affected: before 1.17.0 |
| CVE-2026-5422 | 8.1 | Jun 2 | Path Traversal in jupyter/jupyter Affected: 2.17.0 |
| CVE-2024-35178 | 7.5 | Jun 6 | The Jupyter Server provides the backend for Jupyter web applications Affected: before 2.14.1 |
| CVE-2022-24757 | 7.5 | Mar 23 | The Jupyter Server provides the backend (i.e Affected: before 1.15.4 |
| CVE-2026-40110 | 7.3 | May 5 | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat Affected: before 2.18.0 |
| CVE-2026-40934 | 6.8 | May 5 | jupyter-server authentication cookies remain valid after password reset due to static cookie secret Affected: before 2.18.0 |
| CVE-2025-61669 | 6.1 | May 5 | jupyter_server next parameter open redirect can redirect users to external domains Affected: before 2.18.0 |
| CVE-2023-40170 | 6.1 | Aug 28 | jupyter-server is the backend for Jupyter web applications Affected: before 2.7.2 |
| CVE-2023-39968 | 6.1 | Aug 28 | jupyter-server is the backend for Jupyter web applications Affected: before 2.7.2 |
| CVE-2020-26275 | 6.1 | Dec 21 | The Jupyter Server provides the backend (i.e Affected: before 1.1.1 |
| CVE-2026-44727 | 5.4 | Jun 22 | Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP Affected: before 2.20.0 |
| CVE-2020-26232 | 5.4 | Nov 24 | Jupyter Server before version 1.0.6 has an Open redirect vulnerability Affected: before 1.0.6 |
| CVE-2023-49080 | 4.3 | Dec 4 | The Jupyter Server provides the backend (i.e Affected: before 2.11.2 |
Showing 15