7.6
Élevée
CVE-2026-40110 Jupyter Server is the backend for Jupyter web applications
Description
Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the start of the string and does not require a full match, a pattern intended to match only a trusted domain (e.g., trusted.example.com) will also match any origin that begins with that domain followed by additional characters (e.g., trusted.example.com.evil.com). An attacker who controls such a domain can bypass the CORS origin restriction and make cross-origin requests to the Jupyter Server API from an untrusted site. This issue has been fixed in version 2.18.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jupyter_server 2.17 | premières → 2.17.0 | Pas de correctif indiqué |
| Migration Toolkit for Applications 8 | Versions non publiées | |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat Migration Toolkit for Applications 8.2 1784109883 | premières → < 1784109883 | 1784109883 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de jupyter_server
Les 14 CVE de jupyter_server →
CVE-2026-114135
Jupyter Server is the backend for Jupyter web applications
8.8
Élevée
CVE-2026-86049
Jupyter Server is the backend for Jupyter web applications
7.1
Élevée
CVE-2026-44727
Jupyter Server is the backend for Jupyter web applications
9.3
Critique
CVE-2026-40934
Jupyter Server is the backend for Jupyter web applications
7.6
Élevée