PyPI/jupyter-server CVE-2022-24757: unknown, EPSS 1.27%
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Action: Upgrade jupyter-server to 1.15.4 or later.
pip install jupyter-server==1.15.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.4 | - |
Fixed versions
| 1.15.4 |
Sources
- osv: PYSEC-2022-179
- https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-p737-p57g-4cpr
- https://github.com/jupyter-server/jupyter_server/commit/a5683aca0b0e412672ac6218d09f74d44ca0de5a
CVE-2022-24757 · published · modified · JSON