Jupyter-server vulnerabilities
We track 10 vulnerabilities in Jupyter-server products across 2 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Jupyter-server vulnerabilities
- 8.8 High severity
jupyter_server: Missing Authorization
Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which authenticated the user but did not call authorizer.is_authorized(...)
- 7.1 High severity
jupyter_server: Insertion of Sensitive Information into Log File
Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A reque
- 10.0 Critical severity
enterprise_gateway: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the server interpolates untrusted environment variables (e.g., KERNEL_XXX) into Kuberne
- 10.0 Critical severity
enterprise_gateway: Improper Neutralization of Special Elements Used in a Template Engine
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the environment variables (KERNEL_XXX) used during the rendering of
- 9.8 Critical severity
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed…
Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching
- 7.3 High severity
jupyter_server: Regular Expression without Anchors
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the
- 8.8 High severity
jupyter_server: Improper Limitation of a Pathname to a Restricted Directory
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the
- 7.5 High severity
jupyter_server: Exposure of Sensitive Information to an Unauthorized Actor
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this pas
- 8.8 High severity
jupyter_server: Exposure of Sensitive Information to an Unauthorized Actor
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user's home
- 7.5 High severity
jupyter_server: Insertion of Sensitive Information into Log File
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth