HIGH7.5PyPI
PYSEC-2021-386· BIT-jupyterhub-2021-41247, CVE-2021-41247Modified: 12/6/2023
package
PyPI/jupyterhub
pkg:pypi/jupyterhub
MEDIUM4.5PyPI
PYSEC-2021-67· BIT-jupyterhub-2020-36191, CVE-2020-36191Modified: 12/6/2023
HIGH7.2PyPI
PYSEC-2024-200· BIT-jupyterhub-2024-41942, CVE-2024-41942Modified: 1/19/2025
HIGH8.1PyPI
PYSEC-2026-1480· BIT-jupyterhub-2024-28233, CVE-2024-28233Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-2188· BIT-jupyterhub-2026-33709, CVE-2026-33709Modified: 7/13/2026
MEDIUM4.3PyPI
PYSEC-2026-2189· BIT-jupyterhub-2026-40864, CVE-2026-40864Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-3853· BIT-jupyterhub-2026-54338, CVE-2026-54338JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login
Modified: 9/29/2026
MEDIUM6.1PyPI
PYSEC-2026-647· CVE-2019-10255, GHSA-rv62-4pmj-xw6hOpen Redirect vulnerability in jupyterhub and notebook
Modified: 7/13/2026
MEDIUM6.1PyPI
GHSA-3vff-hjqv-m7h8· BIT-jupyterhub-2026-33709, CVE-2026-33709JupyterHub has an Open Redirect Vulnerability
Modified: 7/13/2026
HIGH8.1PyPI
GHSA-7r3h-4ph8-w38g· BIT-jupyterhub-2024-28233, CVE-2024-28233Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Modified: 9/10/2026
MEDIUM4.5PyPI
GHSA-7xx3-qp5w-fw96· BIT-jupyterhub-2020-36191, CVE-2020-36191Cross-Site Request Forgery in JupyterHub
Modified: 9/24/2024
HIGH7.2PyPI
GHSA-9x4q-3gxw-849f· BIT-jupyterhub-2024-41942, CVE-2024-41942JupyterHub has a privilege escalation vulnerability with the `admin:users` scope
Modified: 9/10/2026
LOW3.5PyPI
GHSA-cw7p-q79f-m2v7· BIT-jupyterhub-2021-41247, CVE-2021-41247incomplete JupyterHub logout with simultaneous JupyterLab sessions
Modified: 7/8/2026
MEDIUM5.4PyPI
GHSA-m68r-v472-jgq9· BIT-jupyterhub-2026-40864, CVE-2026-40864JupyterHub has cross-origin form POSTs bypass XSRF (CWE-352)
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-p43p-whwx-q52h· BIT-jupyterhub-2026-54338, CVE-2026-54338JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login
Modified: 9/29/2026
MEDIUM6.1PyPI
GHSA-rv62-4pmj-xw6h· CVE-2019-10255, PYSEC-2026-2683Open Redirect vulnerability in jupyterhub and notebook
Modified: 7/13/2026