Security Policy
If you find a security vulnerability in Jupyter, please report it to security@ipython.org.
See more information in our docs.
Security: jupyter-server/jupyter_server
Security
SECURITY.md
-
Jupyter server on Windows discloses Windows user password hashGHSA-hrw6-wg82-cm62 published
Jun 6, 2024 by blink1073High -
Server errors include tracebacks with path informationGHSA-h56g-gq9v-vc8r published
Dec 4, 2023 by blink1073Low -
cross-site inclusion (XSSI) of filesGHSA-64x5-55rw-9974 published
Aug 28, 2023 by ZsailerModerate -
Open Redirect VulnerabilityGHSA-r726-vmfq-j9j3 published
Aug 28, 2023 by ZsailerModerate -
Known or guessable hidden files may be accessedGHSA-q874-g24w-4q9g published
Jun 14, 2022 by blink1073Moderate -
Sensitive Auth & Cookie data stored in Jupyter server logsGHSA-p737-p57g-4cpr published
Mar 22, 2022 by ZsailerHigh -
Open redirect vulnerabilityGHSA-9f66-54xg-pc2c published
Dec 16, 2020 by ZsailerModerate -
Open redirect vulnerabilityGHSA-grfj-wjv9-4f9v published
Nov 18, 2020 by ZsailerModerate
Learn more about advisories related to jupyter-server/jupyter_server in the GitHub Advisory Database