enterprise_gateway vulnerabilities

3 known vulnerabilities in enterprise_gateway from Jupyter-server. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  enterprise_gateway: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-44182Jul 16, 2026Jupyter-server

  Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions prior to 3.3.0, the server interpolates untrusted environment variables (e.g., KERNEL_XXX) into Kuberne

• 10.0 Critical severity

  enterprise_gateway: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-44181Jul 16, 2026Jupyter-server

  Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. In versions 2.0.0rc2 and above, prior to 3.3.0, the environment variables (KERNEL_XXX) used during the rendering of

• 9.8 Critical severity

  Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed…

  CVE-2026-44180Jul 16, 2026Jupyter-server

  Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clusters like Apache Spark, Kubernetes, and Docker Swarm. Versions 2.0.0rc1 and above prior to 3.3.0 have a prohibited UID and GID feature that by default prevents launching