JU
Vendor
jupyterhub
10
CVEs
0
On KEV
1
New 30D
Products
JU6.1
jupyterhub
jupyterhub
4 CVEs0 on KEV1 new
FU9.8
First Use Authenticator
Jupyterhub
1 CVEs0 on KEV0 new
KU8.1
Kubespawner
Jupyterhub
1 CVEs0 on KEV0 new
LT5.9
ltiauthenticator
jupyterhub
1 CVEs0 on KEV0 new
NB8.8
Nbgitpuller
Jupyterhub
1 CVEs0 on KEV0 new
OA8.8
oauthenticator
jupyterhub
1 CVEs0 on KEV0 new
SY7.9
Systemdspawner
Jupyterhub
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108752 | JU jupyterhub jupyterhub | 4.2 | Oct 11 | JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen |
| CVE-2026-54338 | JU jupyterhub jupyterhub | 5.3 | Aug 7 | JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login |
| CVE-2026-40864 | JU jupyterhub jupyterhub | 4.3 | May 22 | JupyterHub: Cross-origin form POSTs bypass XSRF |
| CVE-2026-34052 | LT ltiauthenticator jupyterhub | 5.9 | Apr 3 | LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service) |
| CVE-2026-33709 | JU jupyterhub jupyterhub | 6.1 | Apr 3 | JupyterHub has an Open Redirect Vulnerability |
| CVE-2026-33175 | OA oauthenticator jupyterhub | 8.8 | Apr 3 | OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims |
| CVE-2021-41194 | FU First Use Authenticator Jupyterhub | 9.8 | Oct 28 | FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub |
| CVE-2021-39160 | NB Nbgitpuller Jupyterhub | 8.8 | Aug 25 | nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path |
| CVE-2020-26261 | SY Systemdspawner Jupyterhub | 7.9 | Dec 9 | jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd |
| CVE-2020-15110 | KU Kubespawner Jupyterhub | 8.1 | Jul 17 | In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have… |