CVE-2026-40934 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, datahub-ingestion-fips...

image-crawl (0.1.0), vimms (2.0.1) +1 more potentially affected by CVE-2026-40934 via jupyter-server (1.10.2)

jupyter-server PYPI version 1.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - image-crawl 0.1.0 - vimms 2.0.1 - xircuits =1.0.0, =1.2.0 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

jupyterlab-tabnine (>=0.0.1, <=0.0.19) potentially affected by CVE-2026-40934 via jupyter-server (1.6.4)

jupyter-server PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - jupyterlab-tabnine =0.0.1, =0.0.19 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-40934 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

oscovida (>=0.2.1, <=0.2.5), voila (>=0.1.8, <=0.1.24) +6 more potentially affected by CVE-2026-40934 via jupyter-server (0.1.1)

jupyter-server PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - oscovida =0.2.1, =0.1.8, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2026-40934 Source advisory:...

a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +100 more potentially affected by CVE-2026-40934 via jupyter-server (>=2.0.0rc3, <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40934 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40934 Source advisory: OSV:PYSEC-2026-69...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-40934 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

CVE-2026-40934

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at /.local/share/jupyter/runtime/jupytercookiesecret and is never rotated when a user changes their password. After a password...

a2 (>=0.1.0, <=0.3.17), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4) +361 more potentially affected by CVE-2026-40934 via jupyter-server (>=0.0.5, <=2.17.0)

jupyter-server PYPI version =0.0.5, =0.1.0, =0.14.0.3rc1, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =1.0.1, =0.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2026-40934 Source advisory: MEND:CVE-2026-40934...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2026-40934 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

geometron (>=0.0.1.dev7, <=0.0.3) potentially affected by CVE-2026-40934 via jupyter-server (1.11.1)

jupyter-server PYPI version 1.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - geometron =0.0.1.dev7, =0.0.3 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

xircuits (1.3.0) potentially affected by CVE-2026-40934 via jupyter-server (1.15.4)

jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-40934 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

e2xgrader (0.1.0.dev1) potentially affected by CVE-2026-40934 via jupyter-server (1.19.1)

jupyter-server PYPI version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - e2xgrader 0.1.0.dev1 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-40934 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-40934 Source advisory: OSV:GHSA-5MRQ-X3X5-8V8F...

a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +100 more potentially affected by CVE-2026-40934 via jupyter-server (>=2.0.0rc3, <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-40934 Source advisory: GHSA-5MRQ-X3X5-8V8F...

a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +100 more potentially affected by CVE-2026-40934 via jupyter-server (>=2.0.0rc3, <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-40934 Source advisory: SNYK:PYTHON-JUPYTERSERVER-16425696...