jupyter server · threatengine.sh

CVE-2026-40934

< 2.18.0

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication

6.8MEDIUM

CVE-2026-40110

< 2.18.0

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Pyth

7.3HIGH

CVE-2026-35397

< 2.18.0

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the

8.8HIGH

CVE-2025-61669

< 2.18.0

Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in

6.1MEDIUM

CVE-2024-35178

< 2.14.1

The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unau

7.5HIGH

CVE-2023-49080

< 2.11.2

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyt

3.5LOW

CVE-2023-40170

< 2.7.2

jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on /files/ URLs could allow ex

4.6MEDIUM

CVE-2023-39968

< 2.7.2

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known

4.3MEDIUM

CVE-2022-29241

< 1.17.0

Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter N

7.1HIGH

CVE-2022-24757

< 1.15.4

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to

7.5HIGH

CVE-2020-26275

< 1.1.1

The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyt

6.1MEDIUM

CVE-2020-26232

< 1.0.6

Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redir

4.1MEDIUM