PyPI/jupyter-enterprise-gateway CVE-2026-44181: critical, EPSS 0.77%
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
Action: Upgrade jupyter-enterprise-gateway to 3.3.0 or later.
pip install jupyter-enterprise-gateway==3.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0rc2 | 3.3.0 | - |
Fixed versions
| 3.3.0 |
Sources
- osv: GHSA-f49j-v924-fx9w
- https://github.com/jupyter-server/enterprise_gateway/security/advisories/GHSA-f49j-v924-fx9w
- https://github.com/jupyter-server/enterprise_gateway
CVE-2026-44181 · published · modified · JSON