https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:41:22.497427+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-39968 BREW-jupyterlab-CVE-2023-39968 — Open Redirect Vulnerability in jupyter-server 2026-10-07T20:41:22.503970+00:00

Affected: Homebrew: jupyterlab

### Impact

Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.

### Patches

Upgrade to Jupyter Server 2.7.2

### Workarounds

None.

### References

Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).

- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/

 https://cve.radiocsirt.org/vuln/euvd-2026-216724 EUVD-2026-216724 2026-10-07T20:41:22.504041+00:00 EUVD-2026-216724 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39968 fkie_cve-2023-39968 2026-10-07T20:41:22.504074+00:00

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-r726-vmfq-j9j3 GHSA-r726-vmfq-j9j3 — Open Redirect Vulnerability in jupyter-server 2026-10-07T20:41:22.504110+00:00

Affected: PyPI: jupyter-server

### Impact

Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.

### Patches

Upgrade to Jupyter Server 2.7.2

### Workarounds

None.

### References

Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).

- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/

 https://cve.radiocsirt.org/vuln/gsd-2023-39968 gsd-2023-39968 2026-10-07T20:41:22.504142+00:00 gsd-2023-39968 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13260-1 openSUSE-SU-2024:13260-1 — python310-jupyter-server-2.7.3-1.1 on GA media 2026-10-07T20:41:22.504155+00:00

python310-jupyter-server-2.7.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-155 PYSEC-2023-155 2026-10-07T20:41:22.504175+00:00

Affected: PyPI: jupyter-server

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39968 UBUNTU-CVE-2023-39968 2026-10-07T20:41:22.504197+00:00

Affected: Ubuntu:22.04:LTS: jupyter-server, Ubuntu:24.04:LTS: jupyter-server, Ubuntu:25.10: jupyter-server, Ubuntu:26.04:LTS: jupyter-server

jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.