Login Request a demo
JU
Product
jupyter_server
by jupyter-server · last CVE Oct 21, 2026
7
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 3Low 0
Severity
All severities7Critical0High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jupyter_server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40934
6.8
0%
May 5
jupyter-server authentication cookies remain valid after password reset due to static cookie secret
Affected: < 2.18.0
CVE-2025-61669
6.1
0%
May 5
jupyter_server next parameter open redirect can redirect users to external domains
Affected: <= 2.17.0
CVE-2026-44727
5.4
0%
Jun 22
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Affected: < 2.20
Showing 3