JU
Vendor
jupyter-server
10
CVEs
0
On KEV
1
New 30D
Products
JU8.8
jupyter_server
jupyter-server
7 CVEs0 on KEV1 new
EN10.0
enterprise_gateway
jupyter-server
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114135 New | JU jupyter_server jupyter-server | 8.8 | Oct 21 | Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization |
| CVE-2026-86049 | JU jupyter_server jupyter-server | 7.1 | Sep 17 | Jupyter Server: 5xx request logging leaks token-bearing Referer header values |
| CVE-2026-44182 | EN enterprise_gateway jupyter-server | 10.0 | Jul 16 | Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering |
| CVE-2026-44181 | EN enterprise_gateway jupyter-server | 10.0 | Jul 16 | Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution |
| CVE-2026-44180 | EN enterprise_gateway jupyter-server | 9.8 | Jul 16 | Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed |
| CVE-2026-44727 | JU jupyter_server jupyter-server | 5.4 | Jun 22 | Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP |
| CVE-2026-40934 | JU jupyter_server jupyter-server | 6.8 | May 5 | jupyter-server authentication cookies remain valid after password reset due to static cookie secret |
| CVE-2026-40110 | JU jupyter_server jupyter-server | 7.3 | May 5 | jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat |
| CVE-2026-35397 | JU jupyter_server jupyter-server | 8.8 | May 5 | jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix |
| CVE-2025-61669 | JU jupyter_server jupyter-server | 6.1 | May 5 | jupyter_server next parameter open redirect can redirect users to external domains |