Executive brief
Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
Affected products
- PyPI jupyterhub
Junglewise Threat Intelligence
CVE-2024-28233: PYSEC-2026-1480 - Cross site scripting (XSS) in JupyterHub via Self-XSS leveraged by Cookie Tossing
CVE-2024-28233 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: jupyterhub (PyPI). Vendors: PyPI.
Related threats
- JupyterHub unauthenticated denial of service in login form handling
- PYSEC-2026-647 - Open Redirect vulnerability in jupyterhub and notebook
- JupyterHub XSRF protection bypass in HTTP form endpoints
- Jupyter JupyterHub open redirect vulnerability
- PYSEC-2024-200 - JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is