Skip to content
OpenAdvisories

Package · Debian

jupyter-server

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-35397 Public exploit

    jupyter-server path traversal allows access to sibling directories sharing root_dir name prefix

    Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the…

    jupyter-server jupyter_server jupyter-server jupyter-server Debian Ubuntu Alpine PyPI