Most recent entries from all

bdu:2025-10399

2026-10-07T11:36:04.635042+00:00

bdu:2025-10399

EUVD-2026-229320

2026-10-07T11:36:04.635073+00:00

EUVD-2026-229320

fkie_cve-2025-32428

2026-10-07T11:36:04.635087+00:00

Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still accessible via the network. This vulnerability does not affect users having TurboVNC as the vncserver executable. This issue is fixed in 3.0.1.

GHSA-vrq4-9hc3-cgp7 — TigerVNC accessible via the network and not just via a UNIX socket as intended

2026-10-07T11:36:04.635118+00:00

Affected: PyPI: jupyter-remote-desktop-proxy

## Summary

`jupyter-remote-desktop-proxy` was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by `jupyter-remote-desktop-proxy` were still accessible via the network.

This vulnerability does not affect users having TurboVNC as the `vncserver` executable.

## Credits

This vulnerability was identified by Arne Gottwald at University of Göttingen and analyzed, reported, and reviewed by @frejanordsiek.

PYSEC-2026-365 — TigerVNC accessible via the network and not just via a UNIX socket as intended

2026-10-07T11:36:04.635146+00:00

Affected: PyPI: jupyter-remote-desktop-proxy

## Summary

This vulnerability does not affect users having TurboVNC as the `vncserver` executable.

## Credits

This vulnerability was identified by Arne Gottwald at University of Göttingen and analyzed, reported, and reviewed by @frejanordsiek.