{"action":"Upgrade jupyter-server-proxy to 3.2.3 or later.","affected":[{"fixed":"3.2.3","introduced":"0"},{"fixed":"4.1.1","introduced":"4.0.0"}],"component":"jupyter-server-proxy","cve_ids":["CVE-2024-28179"],"ecosystem":"PyPI","epss":0.0103,"exploited":false,"fixed_versions":["3.2.3","4.1.1"],"ghsa_id":"GHSA-w3vc-fx9p-wp4v","id":"tcs_01M5KGMMMWXKW7ZBVBMM5Q901A","modified_at":"2026-06-10T17:14:19.030800237Z","published_at":"2024-03-20T20:15:08Z","references":["https://osv.dev/vulnerability/PYSEC-2024-234","https://github.com/jupyterhub/jupyter-server-proxy/security/advisories/GHSA-w3vc-fx9p-wp4v","https://github.com/jupyterhub/jupyter-server-proxy/commit/764e499f61a87641916a7a427d4c4b1ac3f321a9","https://github.com/jupyterhub/jupyter-server-proxy/commit/bead903b7c0354b6efd8b4cde94b89afab653e03","https://github.com/jupyterhub/jupyter-server-proxy/blob/9b624c4d9507176334b46a85d94a4aa3bcd29bed/jupyter_server_proxy/handlers.py#L433","https://github.com/advisories/GHSA-w3vc-fx9p-wp4v"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-234","url":"https://osv.dev/vulnerability/PYSEC-2024-234"}],"summary":"Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server"}