Skip to content
OpenAdvisories

Package · Debian

jupyterhub

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-40864 Public exploit

    JupyterHub: Cross-origin form POSTs bypass XSRF

    JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing …

    jupyterhub jupyterhub jupyterhub jupyterhub Debian Ubuntu Wolfi PyPI