{"action":"Upgrade jupyter-server to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"jupyter-server","cve_ids":["CVE-2020-26275"],"ecosystem":"PyPI","epss":0.01373,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-9f66-54xg-pc2c","id":"tcs_01M5KGAQ967DDTWCJR8JZDBHBH","modified_at":"2026-07-09T16:56:16.793000806Z","published_at":"2020-12-21T18:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-50","https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-9f66-54xg-pc2c","https://pypi.org/project/jupyter-server/","https://github.com/jupyter-server/jupyter_server/commit/85e4abccf6ea9321d29153f73b0bd72ccb3a6bca","https://advisory.checkmarx.net/advisory/CX-2020-4291"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-50","url":"https://osv.dev/vulnerability/PYSEC-2020-50"}],"summary":"The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1"}