Alta
CVE-2026-86049
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 28
Restablecer filtros
Media
CVE-2026-73416
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
Alta
CVE-2026-54528
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
Alta
CVE-2026-42557
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
Alta
CVE-2025-30167
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Alta
CVE-2025-30370
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
Alta
CVE-2024-22421
JupyterLab vulnerable to potential authentication and CSRF tokens leak
Alta
CVE-2024-22415
Unsecured endpoints in the jupyter-lsp server extension
Crítica
CVE-2026-44727
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Crítica
CVE-2026-44182
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Crítica
CVE-2026-44181
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
Crítica
CVE-2026-44180
Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass
Alta
CVE-2026-40110
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Alta
CVE-2026-40934
Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Alta
CVE-2026-35397
Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories
Media
CVE-2025-61669
Jupyter Server has an open redirection vulnerability in `next` query parameter
Media
CVE-2026-23528
Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Media
CVE-2024-35225
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
Alta
CVE-2024-35178
Jupyter server on Windows discloses Windows user password hash
Crítica
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Media
CVE-2023-49080
jupyter-server errors include tracebacks with path information
Media
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Media
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
Alta
CVE-2022-29241
Jupyter server Token bruteforcing
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.