Skip to content
OpenAdvisories

Vendor

bokeh

1 known vulnerabilities.

Products

bokeh 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.5
    CVE-2026-21883

    Bokeh server applications have Incomplete Origin Validation in WebSockets

    Bokeh is an interactive visualization library written in Python. In versions 3.8.1 and below, if a server is configured with an allowlist (e.g., dashboard.corp), an attacker can register a domain like dashboard.corp.attacker.com (or use a subdomain if applica…

    bokeh bokeh bokeh PyPI