TI-2026-29520 CVE-2026-40864 · GHSA-m68r-v472-jgq9
JupyterHub: Cross-origin form POSTs bypass XSRF
Priority LOW 23
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks.
Vulnerabilities
7 records
TI-2026-26088 CVE-2026-33709 · GHSA-3vff-hjqv-m7h8
JupyterHub has an Open Redirect Vulnerability
Priority LOW 23
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.
TI-2024-27964 CVE-2024-41942 · GHSA-9x4q-3gxw-849f
JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
Priority LOW 32
JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks.
TI-2024-18792 CVE-2024-28233 · GHSA-7r3h-4ph8-w38g
XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing
Priority LOW 37
JupyterHub is an open source multi-user server for Jupyter notebooks.
TI-2021-18082 CVE-2021-41247 · GHSA-cw7p-q79f-m2v7
incomplete logout in JupyterHub
Priority LOW 34
JupyterHub is an open source multi-user server for Jupyter notebooks.
TI-2020-18511 CVE-2020-36191 · GHSA-7xx3-qp5w-fw96
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field…
Priority LOW 21
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).
TI-2019-07569 CVE-2019-10255 · GHSA-rv62-4pmj-xw6h
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some…
Priority LOW 31
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious s…