Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: jupyterlab Component: Jupyter Server Clear all filters
TI-2026-05842 CVE-2026-6657

CORS Origin Validation Bypass in jupyter-server

Priority HIGH 71

A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05213 Published 2026-06-03 Fix deferred CWE-346
TI-2026-04748 CVE-2026-5422

Path Traversal in jupyter/jupyter

Priority HIGH 70

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.py.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.04858 Published 2026-06-02 Fixed CWE-23
TI-2023-20861 CVE-2023-39968 · GHSA-r726-vmfq-j9j3

Open Redirect Vulnerability in jupyter-server

Priority LOW 28

jupyter-server is the backend for Jupyter web applications.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2023-08-28 Fixed in 2.7.2 CWE-601
TI-2020-16096 CVE-2020-26275 · GHSA-9f66-54xg-pc2c

Open redirect in jupyterlab jupyter_server

Priority LOW 30

The Jupyter Server provides the backend (i.e.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01373 Published 2020-12-21 Fixed in 1.1.1 CWE-601
TI-2020-16053 CVE-2020-26232 · GHSA-grfj-wjv9-4f9v

Open redirect in Jupyter Server

Priority LOW 26

Jupyter Server before version 1.0.6 has an Open redirect vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01004 Published 2020-11-24 Fixed in 1.0.6 CWE-601