Vendor

    Jupyter-server

    18 known vulnerabilities in products by Jupyter-server, 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Jupyter-server
    CriticalCVE-2026-44181

    Jupyter-server Enterprise Gateway: Improper Neutralization of Special Elements Used in a Template Engine

    also in 1 other product

    		10.0
    CriticalCVE-2026-44180

    Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed

    also in 1 other product

    		9.8
    CriticalCVE-2026-44182

    Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering

    also in 1 other product

    		10.0
    HighCVE-2026-114135

    Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization

    		8.8
    HighCVE-2026-35397

    jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix

    also in 1 other product

    		8.8
    CriticalCVE-2026-44727

    Jupyter Server: Cross-site Scripting

    also in 1 other product

    		5.4
    HighCVE-2022-24757

    Sensitive Auth & Cookie data stored in Jupyter server logs

    also in 1 other product

    		7.5
    HighCVE-2026-86049

    Jupyter Server: 5xx request logging leaks token-bearing Referer header values

    		7.1
    MediumCVE-2020-26275

    Open redirect vulnerability

    also in 1 other product

    		6.1
    HighCVE-2024-35178

    Jupyter server on Windows discloses Windows user password hash

    also in 1 other product

    		7.5
    HighCVE-2022-29241

    Known or guessable hidden files may be accessed in Jupyter Server

    also in 1 other product

    		7.1
    HighCVE-2026-40934

    jupyter-server authentication cookies remain valid after password reset due to static cookie secret

    also in 1 other product

    		6.8
    HighCVE-2026-40110

    jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat

    also in 1 other product

    		7.3
    MediumCVE-2025-61669

    jupyter_server next parameter open redirect can redirect users to external domains

    also in 1 other product

    		6.1
    MediumCVE-2023-49080

    Jupyter Server errors include tracebacks with path information

    also in 1 other product

    		3.5
    MediumCVE-2023-39968

    Open Redirect Vulnerability in jupyter-server

    also in 1 other product

    		4.3
    MediumCVE-2023-40170

    cross-site inclusion (XSSI) of files in jupyter-server

    also in 1 other product

    		4.6
    MediumCVE-2024-28188

    jupyter-scheduler's endpoint is missing authentication

    		5.3

    News

    Products

    Products by Jupyter-server
    Jupyter Server140
    Enterprise Gateway30