PyPI/jupyter-server CVE-2020-26232: medium 4.1, EPSS 1.00%

Open redirect in Jupyter Server

Action: Upgrade jupyter-server to 1.0.6 or later.

pip install jupyter-server==1.0.6

Affected

Fixed versions

Sources

• osv: GHSA-grfj-wjv9-4f9v
• https://github.com/jupyter/jupyter_server/security/advisories/GHSA-grfj-wjv9-4f9v
• https://nvd.nist.gov/vuln/detail/CVE-2020-26232
• https://github.com/jupyter-server/jupyter_server/commit/3d83e49090289c431da253e2bdb8dc479cbcb157
• https://github.com/jupyter-server/jupyter_server
• https://github.com/jupyter-server/jupyter_server/blob/master/CHANGELOG.md#106---2020-11-18
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2020-234.yaml

CVE-2020-26232 · published 2020-11-24T21:20:52Z · modified 2026-09-10T03:48:35.837724184Z · JSON