jupyter-server has 12 CVEs on record between 2020 and 2026. 2 were published in the last 90 days. The median CVSS is 6.1 (medium). None have a confirmed exploitation report. Most affected products: jupyter-server (10), jupyter_server (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 2 prev 3
Weakness classes
Products
- jupyter-server 10
- jupyter_server 2
Worst active — by depth score
CVE-2026-114135High· 8.8Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization48CVE-2026-40110HighJupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`41CVE-2024-35178High· 7.5Jupyter server on Windows discloses Windows user password hash41CVE-2026-86049High· 7.1Jupyter Server is the backend for Jupyter web applications39CVE-2022-29241High· 7.1Jupyter server Token bruteforcing39
jupyter-server vulnerabilities
CVEs affecting jupyter-server, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2026-114135High· 8.8Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which authenticated the user but did not call author…
CVE-2026-86049High· 7.1⚖ disputedJupyter Server is the backend for Jupyter web applications
Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for t…
CVE-2026-44727Medium· 5.4Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
CVE-2026-40934Medium· 6.8Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
CVE-2026-40110HighJupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
CVE-2024-35178High· 7.5Jupyter server on Windows discloses Windows user password hash
Jupyter server on Windows discloses Windows user password hash
CVE-2023-49080Medium· 4.3jupyter-server errors include tracebacks with path information
jupyter-server errors include tracebacks with path information
CVE-2023-39968Medium· 6.1Open Redirect Vulnerability in jupyter-server
Open Redirect Vulnerability in jupyter-server
CVE-2023-40170Medium· 4.6cross-site inclusion (XSSI) of files in jupyter-server
cross-site inclusion (XSSI) of files in jupyter-server
CVE-2022-29241High· 7.1Jupyter server Token bruteforcing
Jupyter server Token bruteforcing
CVE-2020-26275Medium· 6.1Jupyter Server open redirect vulnerability
Jupyter Server open redirect vulnerability
CVE-2020-26232Medium· 4.1Open redirect in Jupyter Server
Open redirect in Jupyter Server