Skip to content
OpenAdvisories

Package · PyPI

jupyter-server-proxy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.7
    CVE-2024-35225

    Jupyter Server Proxy has a reflected XSS issue in host parameter

    Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.0 have a reflected cross-site scripting (XSS) issue. The `/…

    jupyterhub jupyter-server-proxy jupyter-server-proxy PyPI
  • Critical 9.1
    CVE-2024-28179

    Jupyter Server Proxy's Websocket Proxying does not require authentication

    Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server Proxy did not check user authentication appropriately when …

    jupyterhub jupyter-server-proxy jupyter-server-proxy PyPI