Bitnami jupyterhub

Name: Bitnami jupyterhub
Brand: Bitnami

productUS

pkg:bitnami/jupyterhub

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical2high5medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-40864US	medium4.3	0.15% (4th)	Exploit	5.4.5	2026-05-22	4.1.0 → 5.4.5
CVE-2021-41247US	high7.5	0.80% (57th)	—	1.5.0	2021-11-04	1.0.0 → 1.5.0
CVE-2024-41942US	high7.2	0.59% (48th)	—	5.1.0	2024-08-08	2 versions
CVE-2020-36191US	medium4.5	0.51% (43rd)	—	1.1.1	2021-01-13	1.1.0 → 1.1.1
CVE-2026-54338US	—	0.44% (38th)	—	5.5.0	2026-08-07	< 5.5.0
CVE-2024-28233US	medium6.1	0.33% (26th)	—	4.1.0	2024-03-27	< 4.1.0
CVE-2026-108752US	medium4.2	0.24% (16th)	—	6.1.0	2026-10-11	< 6.1.0
CVE-2026-33709US	medium6.1	0.21% (11th)	—	5.4.4	2026-04-03	< 5.4.4

The flaw types (CWEs) most of these CVEs share.

CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-274Improper Handling of Insufficient Privileges1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-565Reliance on Cookies without Validation and Integrity Checking1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-694Use of Multiple Resources with Duplicate Identifier1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.