PyPI / jupyter-server

Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat` (from huntr)

Modified: 5/8/2026

Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories

Modified: 6/6/2026

Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart

Modified: 6/6/2026

cross-site inclusion (XSSI) of files in jupyter-server

Modified: 2/4/2026

Jupyter Server open redirect vulnerability

Modified: 5/19/2026

Open redirect in Jupyter Server

Modified: 3/13/2026

jupyter-server errors include tracebacks with path information

Modified: 2/4/2026

Jupyter server on Windows discloses Windows user password hash

Modified: 6/10/2026

Insertion of Sensitive Information into Log File in Jupyter notebook

Modified: 11/8/2023

Jupyter server Token bruteforcing

Modified: 2/4/2026

Jupyter Server has an open redirection vulnerability in `next` query parameter

Modified: 6/5/2026

Open Redirect Vulnerability in jupyter-server

Modified: 2/4/2026

Modified: 11/8/2023

Modified: 5/19/2026

Modified: 5/19/2026

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/8/2023

Modified: 11/21/2024

Modified: 6/10/2026

Modified: 5/20/2026

Modified: 5/20/2026

Modified: 5/20/2026