https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:37:40.886692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-jupyterhub-2026-33709 BIT-jupyterhub-2026-33709 — JupyterHub has an Open Redirect Vulnerability 2026-10-09T13:37:40.956290+00:00

Affected: Bitnami: jupyterhub

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.

 https://cve.radiocsirt.org/vuln/euvd-2026-280443 EUVD-2026-280443 2026-10-09T13:37:40.956351+00:00 EUVD-2026-280443 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33709 fkie_cve-2026-33709 2026-10-09T13:37:40.956368+00:00

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.

 https://cve.radiocsirt.org/vuln/ghsa-3vff-hjqv-m7h8 GHSA-3vff-hjqv-m7h8 — JupyterHub has an Open Redirect Vulnerability 2026-10-09T13:37:40.956395+00:00

Affected: PyPI: jupyterhub

## Affected Version

JupyterHub <= 5.4.3

## Impact

An open redirect vulnerability in JupyterHub <=5.4.3 allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this.

## Patches

Upgrade to JupyterHub 5.4.4

## Workarounds

A deployment can apply filters on the Location header in a reverse proxy such as nginx/apache/traefik.

 https://cve.radiocsirt.org/vuln/pysec-2026-2188 PYSEC-2026-2188 2026-10-09T13:37:40.956469+00:00

Affected: PyPI: jupyterhub

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33709 UBUNTU-CVE-2026-33709 2026-10-09T13:37:40.956506+00:00

Affected: Ubuntu:22.04:LTS: jupyterhub, Ubuntu:24.04:LTS: jupyterhub, Ubuntu:25.10: jupyterhub, Ubuntu:26.04:LTS: jupyterhub

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.