jupyter jupyterhub

Name: jupyter jupyterhub
Brand: jupyter

productUS

cpe:2.3:a:jupyter:jupyterhub:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical2high5medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-40864US	medium4.3	0.15% (4th)	Exploit	5.4.5	2026-05-22	4.1.0 → 5.4.5
CVE-2019-10255US	medium6.1	1.76% (78th)	—	0.9.5	2019-03-28	< 0.9.5
CVE-2021-41247US	high7.5	0.80% (57th)	—	1.5.0	2021-11-04	1.0.0 → 1.5.0
CVE-2024-41942US	high7.2	0.59% (48th)	—	4.1.6	2024-08-08	2 versions
CVE-2020-36191US	medium4.5	0.51% (43rd)	—	no fix	2021-01-13	= 1.1.0
CVE-2024-28233US	medium6.1	0.33% (26th)	—	4.1.0	2024-03-27	< 4.1.0
CVE-2026-33709US	medium6.1	0.21% (11th)	—	5.4.4	2026-04-03	< 5.4.4

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-274Improper Handling of Insufficient Privileges1 CVEs
CWE-565Reliance on Cookies without Validation and Integrity Checking1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.