{"action":"Upgrade jupyter-server-proxy to 3.2.4 or later.","affected":[{"fixed":"3.2.4","introduced":"3.0.0"},{"fixed":"4.2.0","introduced":"4.1.2"}],"component":"jupyter-server-proxy","cve_ids":["CVE-2024-35225"],"ecosystem":"PyPI","epss":0.00442,"exploited":false,"fixed_versions":["3.2.4","4.2.0"],"ghsa_id":"GHSA-fvcq-4x64-hqxr","id":"tcs_01M5KGMN93D49VWYADWSV5MXHA","modified_at":"2026-06-10T17:14:18.907740365Z","published_at":"2024-06-11T22:15:09Z","references":["https://osv.dev/vulnerability/PYSEC-2024-236","https://github.com/jupyterhub/jupyter-server-proxy/security/advisories/GHSA-fvcq-4x64-hqxr","https://github.com/jupyterhub/jupyter-server-proxy/commit/7abc9dc5bbb0b4b440548a5375261b8b8192fc22","https://github.com/jupyterhub/jupyter-server-proxy/commit/ff78128087e73fb9d0909e1366f8bf051e8ea878","https://github.com/jupyterhub/jupyter-server-proxy/blob/62a290f08750f7ae55a0c29ca339c9a39a7b2a7b/jupyter_server_proxy/handlers.py#L328","https://github.com/advisories/GHSA-fvcq-4x64-hqxr"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-236","url":"https://osv.dev/vulnerability/PYSEC-2024-236"}],"summary":"Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2."}