Skip to content
OpenAdvisories

Package · PyPI

jupyter-server-proxy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.7
    CVE-2024-35225

    Jupyter Server Proxy has a reflected XSS issue in host parameter

    Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.0 have a reflected cross-site scripting (XSS) issue. The `/…

    jupyterhub jupyter-server-proxy jupyter-server-proxy PyPI
  • Critical 9.1
    CVE-2024-28179

    Jupyter Server Proxy's Websocket Proxying does not require authentication

    Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server Proxy did not check user authentication appropriately when …

    jupyterhub jupyter-server-proxy jupyter-server-proxy PyPI
  • Medium 6.3
    CVE-2022-21697

    SSRF vulnerability (requires authentication)

    Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery (SSRF). Any user deploying Jupyter Server or Notebook with jupyter-proxy-server ex…

    jupyterhub jupyter-server-proxy jupyter-server-proxy PyPI