Known vulnerabilities in python3-jupyter-server

Vendor: openEuler
Software: python3-jupyter-server
Software CPE: cpe:2.3:o:openeuler:python3-jupyter-server:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python3-jupyter-server python3-jupyter-server is affected by 6 known vulnerabilities: 1 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146866 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-44727		 CWE-79 Low
No
No
 2.13.0-3 03.09.2026 SB2026090354
SB2026090362
SB2026092035
and 2 more
#VU146865 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-35397		 CWE-22 Low
No
No
 2.13.0-3, 2.13.0-4 03.09.2026 SB20260505104
SB20260925193
SB2026100171
and 1 more
#VU130163 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-61669		 CWE-601 Medium
No
No
 2.13.0-3, 2.13.0-4 05.05.2026 SB20260505104
SB20260925193
SB2026100171
and 1 more
#VU130162 - Insufficient Session Expiration
CVE-2026-40934		 CWE-613 Low
No
No
 2.13.0-3, 2.13.0-4 05.05.2026 SB20260505104
SB20260925193
SB2026100171
and 1 more
#VU130161 - Regular Expression without Anchors
CVE-2026-40110		 CWE-777 Medium
No
No
 2.13.0-3, 2.13.0-4 05.05.2026 SB20260505104
SB20260925193
SB2026100171
and 1 more
#VU99615 - Exposure of sensitive information to an unauthorized actor
CVE-2024-35178		 CWE-200 High
No
No
 2.13.0-2 01.11.2024 SB2024110168
SB2024110184