Priority MEDIUM 49
Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub.
CVSS 4.0CRITICAL 9.0· Adjacent network · No auth · No interaction · EPSS 0.00935 · Published 2025-04-14 · Fixed in 3.0.1 CWE-668
Priority MEDIUM 49
`jupyterhub-ltiauthenticator` is a JupyterHub authenticator for learning tools interoperability (LTI).
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00355 · Published 2025-02-25 · Fixed in 1.4.0 CWE-347
Priority MEDIUM 46
BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01928 · Published 2021-08-25 · Fixed in 0.2.0-n653, 0.2.0 CWE-94
Priority MEDIUM 45
FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01367 · Published 2021-10-28 · Fixed in 1.0.0 CWE-284
Priority MEDIUM 45
nbgitpuller is a Jupyter server extension to sync a git repository one-way to a local path.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0173 · Published 2021-08-25 · Fixed in 0.10.2 CWE-94
Priority MEDIUM 44
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01021 · Published 2024-03-20 · Fixed in 4.1.1, 3.2.3 CWE-306
Priority MEDIUM 43
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them.
CVSS 3.1CRITICAL 9.7· Network · No auth · User interaction · EPSS 0.00442 · Published 2024-06-11 · Fixed in 3.2.4, 4.2.0 CWE-116
Priority MEDIUM 40
OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00446 · Published 2026-04-03 · Fixed in 17.4.0 CWE-287
Priority MEDIUM 40
OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00589 · Published 2024-03-20 · Fixed in 16.3.0 CWE-285
Priority LOW 37
JupyterHub is an open source multi-user server for Jupyter notebooks.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00329 · Published 2024-03-27 · Fixed in 4.1.0 CWE-352
Priority LOW 37
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01114 · Published 2020-07-17 · Fixed in 0.12, 0.12.0 CWE-863
Priority LOW 36
dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers.
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00638 · Published 2023-12-08 · Fixed in 13.0, 13.0.0 CWE-20
Priority LOW 35
OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00405 · Published 2024-06-12 · Fixed in 16.3.1 CWE-863
Priority LOW 35
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd.
CVSS 3.1HIGH 7.9· Local · Low privileges · User interaction · EPSS 0.0048 · Published 2020-12-09 · Fixed in 0.15, 0.15.0 CWE-668
Priority LOW 34
JupyterHub is an open source multi-user server for Jupyter notebooks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00804 · Published 2021-11-04 · Fixed in 1.5.0 CWE-613
Priority LOW 33
Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01096 · Published 2022-01-25 · Fixed in 3.2.1 CWE-918
Priority LOW 32
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0059 · Published 2024-08-08 · Fixed in 4.1.6, 5.1.0 CWE-274
Priority LOW 30
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00437 · Published 2026-08-07 · Fixed in 5.5.0 CWE-400
Priority LOW 30
OAuthenticator is an OAuth login mechanism for JupyterHub.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.01132 · Published 2020-12-01 · Fixed in 0.12.2 CWE-863
Priority LOW 29
OAuthenticator is an OAuth token library for the JupyerHub login handler.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00475 · Published 2022-06-06 · Fixed in 15.0.0 CWE-639
Priority LOW 26
LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00342 · Published 2026-04-03 · Fixed in 1.6.3 CWE-401
Priority LOW 23
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00146 · Published 2026-05-22 · Fixed in 5.4.5 CWE-352
Priority LOW 23
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00214 · Published 2026-04-03 · Fixed in 5.4.4 CWE-601
Priority LOW 12
JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00245 · Published 2026-10-11 · No fix listed CWE-694
THREATIST.IORead the docs