Jupyter Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

JS

Product

Jupyter Server

by Jupyter · last CVE Jun 22, 2026

15

CVEs

0

On KEV

8.8

Max CVSS

0

New 30D

Vulnerabilities15 In the news0 Timeline

Severity mix

Critical 0High 7Medium 8Low 0

Severity

All severities15 Critical0 High7 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Jupyter Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6657	8.8	6%	Jun 3	CORS Origin Validation Bypass in jupyter-server Affected: 1.12.0 through 2.17.0
CVE-2026-35397	8.8	1%	May 5	jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix Affected: before 2.18.0
CVE-2022-29241	8.8	1%	Jun 14	Jupyter Server provides the backend (i.e Affected: before 1.17.0
CVE-2026-5422	8.1	5%	Jun 2	Path Traversal in jupyter/jupyter Affected: 2.17.0
CVE-2024-35178	7.5	1%	Jun 6	The Jupyter Server provides the backend for Jupyter web applications Affected: before 2.14.1
CVE-2022-24757	7.5	1%	Mar 23	The Jupyter Server provides the backend (i.e Affected: before 1.15.4
CVE-2026-40110	7.3	0%	May 5	jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat Affected: before 2.18.0