https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:50:55 +0000 https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-39968 <p><strong>Affected:</strong> Homebrew: jupyterlab</p> <p>### Impact</p> <p>Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.</p> <p>### Patches</p> <p>Upgrade to Jupyter Server 2.7.2</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).</p> <p>- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/</p> <p><strong>Affected:</strong> Homebrew: jupyterlab</p> <p>### Impact</p> <p>Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.</p> <p>### Patches</p> <p>Upgrade to Jupyter Server 2.7.2</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).</p> <p>- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/</p> https://cve.radiocsirt.org/vuln/brew-jupyterlab-cve-2023-39968 https://cve.radiocsirt.org/vuln/euvd-2026-216724 EUVD-2026-216724 https://cve.radiocsirt.org/vuln/euvd-2026-216724 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39968 <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-39968 https://cve.radiocsirt.org/vuln/ghsa-r726-vmfq-j9j3 <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>### Impact</p> <p>Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.</p> <p>### Patches</p> <p>Upgrade to Jupyter Server 2.7.2</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).</p> <p>- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/</p> <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>### Impact</p> <p>Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs.</p> <p>### Patches</p> <p>Upgrade to Jupyter Server 2.7.2</p> <p>### Workarounds</p> <p>None.</p> <p>### References</p> <p>Vulnerability reported by user davwwwx via the [bug bounty program](https://app.intigriti.com/programs/jupyter/jupyter/detail) [sponsored by the European Commission](https://commission.europa.eu/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-01-19_en) and hosted on the [Intigriti platform](https://www.intigriti.com/).</p> <p>- https://blog.xss.am/2023/08/cve-2023-39968-jupyter-token-leak/</p> https://cve.radiocsirt.org/vuln/ghsa-r726-vmfq-j9j3 https://cve.radiocsirt.org/vuln/gsd-2023-39968 gsd-2023-39968 https://cve.radiocsirt.org/vuln/gsd-2023-39968 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13260-1 <p>python310-jupyter-server-2.7.3-1.1 on GA media</p> <p>python310-jupyter-server-2.7.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13260-1 https://cve.radiocsirt.org/vuln/pysec-2023-155 <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> PyPI: jupyter-server</p> <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/pysec-2023-155 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39968 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jupyter-server, Ubuntu:24.04:LTS: jupyter-server, Ubuntu:25.10: jupyter-server, Ubuntu:26.04:LTS: jupyter-server</p> <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jupyter-server, Ubuntu:24.04:LTS: jupyter-server, Ubuntu:25.10: jupyter-server, Ubuntu:26.04:LTS: jupyter-server</p> <p>jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be restricted to Jupyter Server-served URLs. This issue has been addressed in commit `29036259` which is included in release 2.7.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-39968