CVE-2026-6657
1 advisory.
PyPI/jupyter-server CVE-2026-6657: medium 6.1, EPSS 0.27%
jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.12.0 | - | 2.17.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3472
- https://nvd.nist.gov/vuln/detail/CVE-2026-6657
- https://github.com/jupyter-server/jupyter_server
- https://huntr.com/bounties/18f642db-3569-43b3-b58d-ff97be4b09d7
- https://pypi.org/project/jupyter-server
- https://github.com/advisories/GHSA-v42x-x7jp-845h
CVE-2026-6657 · published · modified · JSON