https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:44:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-46058 EUVD-2026-46058 https://cve.radiocsirt.org/vuln/euvd-2026-46058 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26232 <p>Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may appear safe, but ultimately redirect to a spoofed server on the public internet.</p> <p>Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may appear safe, but ultimately redirect to a spoofed server on the public internet.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26232 https://cve.radiocsirt.org/vuln/ghsa-grfj-wjv9-4f9v <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>Open redirect vulnerability - a maliciously crafted link to a jupyter server could redirect the browser to a different website.</p> <p>All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may *appear* safe, but ultimately redirect to a spoofed server on the public internet.</p> <p>This originated in jupyter/notebook: https://github.com/jupyter/notebook/security/advisories/GHSA-c7vm-f5p4-8fqh</p> <p>### Patches</p> <p>_Has the problem been patched? What versions should users upgrade to?_</p> <p>jupyter_server 1.0.6</p> <p>### References</p> <p>[OWASP page on open redirects](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html)</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or vulnerabilities to report, please email our security list [security@ipython.org](mailto:security@ipython.org).</p> <p>Credit: zhuonan li of Alibaba Application Security Team</p> <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p>Open redirect vulnerability - a maliciously crafted link to a jupyter server could redirect the browser to a different website.</p> <p>All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may *appear* safe, but ultimately redirect to a spoofed server on the public internet.</p> <p>This originated in jupyter/notebook: https://github.com/jupyter/notebook/security/advisories/GHSA-c7vm-f5p4-8fqh</p> <p>### Patches</p> <p>_Has the problem been patched? What versions should users upgrade to?_</p> <p>jupyter_server 1.0.6</p> <p>### References</p> <p>[OWASP page on open redirects](https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html)</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory, or vulnerabilities to report, please email our security list [security@ipython.org](mailto:security@ipython.org).</p> <p>Credit: zhuonan li of Alibaba Application Security Team</p> https://cve.radiocsirt.org/vuln/ghsa-grfj-wjv9-4f9v https://cve.radiocsirt.org/vuln/gsd-2020-26232 gsd-2020-26232 https://cve.radiocsirt.org/vuln/gsd-2020-26232 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11233-1 <p>python36-jupyter-server-1.10.2-1.2 on GA media</p> <p>python36-jupyter-server-1.10.2-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11233-1 https://cve.radiocsirt.org/vuln/pysec-2020-234 <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may appear safe, but ultimately redirect to a spoofed server on the public internet.</p> <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are technically affected, however, these maliciously crafted links can only be reasonably made for known jupyter server hosts. A link to your jupyter server may appear safe, but ultimately redirect to a spoofed server on the public internet.</p> https://cve.radiocsirt.org/vuln/pysec-2020-234