jupyter-server-proxy vulnerabilities

2 known vulnerabilities in jupyter-server-proxy from Jupyterhub. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  jupyter-server-proxy: Missing Authentication for Critical Functionality

  CVE-2024-28179Mar 20, 2024JupyterhubEPSS 1.02%

  Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server Proxy did not check user authentication appropriately when p

• 7.1 High severity

  jupyter-server-proxy: Server-Side Request Forgery

  CVE-2022-21697Jan 25, 2022JupyterhubEPSS 1.1%

  Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery (SSRF). Any user deploying Jupyter Server or Notebook with jupyter-proxy-server ext