JupyterHub — CVE history (PyPI)
JupyterHub
7 CVEs affect the JupyterHub PyPI package (highest CVSS 8.1). Latest disclosed: 2026-05-22. Full CVE history sourced from NVD.
Summary
- Package
JupyterHub(PyPI)- Total CVEs
7- Actively exploited (CISA KEV)
- 0
- Highest CVSS
8.1- Latest disclosed
- 2026-05-22
Recent CVEs (top 7)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-40864 | Medium | 5.4 | — | 2026-05-22 | JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. |
CVE-2026-33709 | Medium | 6.1 | — | 2026-04-03 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. |
CVE-2024-41942 | High | 7.2 | — | 2024-08-08 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. |
CVE-2024-28233 | High | 8.1 | — | 2024-03-27 | JupyterHub is an open source multi-user server for Jupyter notebooks. |
CVE-2021-41247 | Low | 3.5 | — | 2021-11-04 | JupyterHub is an open source multi-user server for Jupyter notebooks. |
CVE-2020-36191 | Medium | 4.5 | — | 2021-01-13 | JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account). |
CVE-2019-10255 | Medium | 6.1 | — | 2019-03-28 | An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successfu… |
All-time worst (top 7 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-28233 | High | 8.1 | — | 2024-03-27 | JupyterHub is an open source multi-user server for Jupyter notebooks. |
CVE-2024-41942 | High | 7.2 | — | 2024-08-08 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. |
CVE-2026-33709 | Medium | 6.1 | — | 2026-04-03 | JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. |
CVE-2019-10255 | Medium | 6.1 | — | 2019-03-28 | An Open Redirect vulnerability for all browsers in Jupyter Notebook before 5.7.7 and some browsers (Chrome, Firefox) in JupyterHub before 0.9.5 allows crafted links to the login page, which will redirect to a malicious site after successfu… |
CVE-2026-40864 | Medium | 5.4 | — | 2026-05-22 | JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. |
CVE-2020-36191 | Medium | 4.5 | — | 2021-01-13 | JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account). |
CVE-2021-41247 | Low | 3.5 | — | 2021-11-04 | JupyterHub is an open source multi-user server for Jupyter notebooks. |