JU
Product
jupyter_server
7
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch
Add jupyter_server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114135 New | 8.8 | Oct 21 | Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization Affected: >= 2.0.0, < 2.6.0 |
| CVE-2026-35397 | 8.8 | May 5 | jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix Affected: < 2.18.0 |
| CVE-2026-40110 | 7.3 | May 5 | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat Affected: <= 2.17.0 |
| CVE-2026-86049 | 7.1 | Sep 17 | Jupyter Server: 5xx request logging leaks token-bearing Referer header values Affected: < 2.21.0 |
Showing 4