Linux Distros Unpatched Vulnerability : CVE-2026-35397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticat...

a-mailx (=0.1.0), a2 (>=0.1.0 <=0.3.17) +362 more potentially affected by CVE-2026-35397 via jupyter-server (>=0.0.5 <=2.17.0)

jupyter-server PYPI version =0.0.5, =0.1.0, =0.14.0.3, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =1.0.1, =0.1.0, =0.14.0 and more Source cves: CVE-2026-35397 Source advisory: OSV:PYSEC-2026-68...

a-mailx (=0.1.0), a2 (>=0.1.0 <=0.3.17) +362 more potentially affected by CVE-2026-35397 via jupyter-server (>=0.0.5 <=2.17.0)

jupyter-server PYPI version =0.0.5, =0.1.0, =0.14.0.3, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =1.0.1, =0.1.0, =0.14.0 and more Source cves: CVE-2026-35397 Source advisory: OSV:GHSA-5789-5FC7-67V3...

a-mailx (=0.1.0), a2 (>=0.1.0 <=0.3.17) +90 more potentially affected by CVE-2026-35397 via jupyter-server (>=2.0.0rc3 <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =3.0.0, =0.1.0, =0.0.1, =0.0.6 and more Source cves: CVE-2026-35397 Source advisory: SNYK:PYTHON-JUPYTERSERVER-16425698...

CVE-2026-35397

creationtimestamp| type| source ---|---|--- 2026-05-05 13:29:57+00:00| seen| https://gist.github.com/Yann-P/66d4982a965dee8fcb8dd89db29e7006 2026-05-05 13:42:10+00:00| published-proof-of-concept| https://github.com/jupyter-server/jupyterserver/security/advisories/GHSA-5789-5fc7-67v3 2026-05-05...

MAL-2025-35397 Malicious code in test-mlw2-gazon-imbed-loons-whaur (npm)

The package test-mlw2-gazon-imbed-loons-whaur was found to contain malicious code...

CVE-2024-35397

TOTOLINK CP900L v4.1.5cu.798B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2024-35397

TOTOLINK CP900L v4.1.5cu.798B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2022-35397

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-35397

...

CVE-2022-35397

CVE-2022-35397 entry is rejected and does not represent an active vulnerability.

CVE-2021-35397

creationtimestamp| type| source ---|---|--- 2021-08-04 15:23:19+00:00| seen| https://t.me/cibsecurity/26791...

CVE-2021-35397

CVE-2021-35397 describes a path-traversal vulnerability in Drogon’s static router affecting versions 1.0.0-beta14 through 1.6.0. The root cause is inadequate input validation on the requested path, enabling an unauthenticated, remote attacker to read files that should be restricted via crafted HT...