Executive brief
Open Redirect vulnerability in jupyterhub and notebook
Affected products
- PyPI jupyterhub
- PyPI notebook
Junglewise Threat Intelligence
CVE-2019-10255: PYSEC-2026-647 - Open Redirect vulnerability in jupyterhub and notebook
CVE-2019-10255 · Severity: low · CVSS 3 · Published 2026-07-02
Technologies: jupyterhub (PyPI), notebook (PyPI). Vendors: PyPI.
Related threats
- JupyterHub unauthenticated denial of service in login form handling
- PYSEC-2026-2682 - Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
- PYSEC-2026-2536 - HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
- PYSEC-2026-2534 - JupyterLab vulnerable to potential authentication and CSRF tokens leak
- PYSEC-2026-2535 - JupyterLab vulnerable to SXSS in Markdown Preview