Description
An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successful login. Servers running on a base_url prefix are not affected.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | jupyter-notebook | 5.7.8-1 | — |
| Debian 13 | jupyter-notebook | 5.7.8-1 | — |
| Debian 12 | jupyter-notebook | 5.7.8-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | jupyter-notebook | 6.4.8-1ubuntu0.1 | USN-5585-1 |
| Ubuntu 20.04 LTS | jupyter-notebook | 6.0.3-2ubuntu0.1 | USN-5585-1 |
| Ubuntu 18.04 LTS | jupyter-notebook | 5.2.2-1ubuntu0.1 | USN-5585-1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | jupyterhub | < 0.9.6 | 0.9.6 | GHSA-rv62-4pmj-xw6h |
| PyPI | notebook | < 5.7.8 | 5.7.8 | GHSA-rv62-4pmj-xw6h |
Advisories 1
- USN-5585-1 jupyter-notebook vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
References
- https://github.com/jupyter/notebook/commit/d65328d4841892b412aef9015165db1eb029a8ed
- https://github.com/jupyter/notebook/commit/08c4c898182edbe97aadef1815cce50448f975cb
- https://github.com/jupyter/notebook/commit/70fe9f0ddb3023162ece21fbb77d5564306b913b
- https://github.com/jupyter/notebook/compare/05aa4b2...16cf97c
- https://blog.jupyter.org/open-redirect-vulnerability-in-jupyter-jupyterhub-adf43583f1e4
- FEDORA-2019-a6e1287e76 vendor-advisory
- FEDORA-2019-9e67979b2a vendor-advisory