Skip to content
OpenAdvisories

Package · Wolfi

py3.11-jupyterhub

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-17495

    moment vulnerable to Path Traversal via crafted non-string locale name

    moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale() can bypass the locale-name path-traversal guard. The guard assu…

    moment moment opensearch-dashboards-3 kubeflow-centraldashboard Debian Ubuntu Wolfi npm
  • Medium 5.4
    CVE-2026-40864 Public exploit

    JupyterHub: Cross-origin form POSTs bypass XSRF

    JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing …

    jupyterhub jupyterhub jupyterhub jupyterhub Debian Ubuntu Wolfi PyPI