PyPI/jupyter-server CVE-2020-26232: unknown, EPSS 1.00%
Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the browser to a different website. All jupyter servers are techni
Action: Upgrade jupyter-server to 1.0.6 or later.
pip install jupyter-server==1.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.6 | - |
Fixed versions
| 1.0.6 |
Sources
- osv: PYSEC-2020-234
- https://github.com/jupyter/jupyter_server/security/advisories/GHSA-grfj-wjv9-4f9v
- https://github.com/jupyter-server/jupyter_server/blob/master/CHANGELOG.md#106---2020-11-18
- https://github.com/jupyter-server/jupyter_server/commit/3d83e49090289c431da253e2bdb8dc479cbcb157
CVE-2020-26232 · published · modified · JSON