Skip to content
OpenAdvisories

Package · Debian

jupyterhub

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-41942

    JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

    JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The imp…

    jupyterhub jupyterhub jupyterhub jupyterhub Debian Ubuntu Wolfi PyPI
  • High 8.1
    CVE-2024-28233

    XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing

    JupyterHub is an open source multi-user server for Jupyter notebooks. By tricking a user into visiting a malicious subdomain, the attacker can achieve an XSS directly affecting the former's session. More precisely, in the context of JupyterHub, this XSS could…

    jupyterhub jupyterhub jupyterhub jupyterhub Debian Ubuntu PyPI