CVE-2026-40864

CVE-2026-40864 — JupyterHub XSRF bypass via cross-origin form POST Sec-Fetch-Mode: no-cors Severity : Medium CVSS 5.4 CWE : CWE-352 — Cross-Site Request Forgery XSRF Affected : jupyterhub 4.1.0 ≤ version 5.4.5 patched in 5.4.5 Advisory : GHSA-m68r-v472-jgq9 NVD :...

CLEANSTART-2026-XG33120 Security fix for CVE-2026-42304 applied in: jupyterhub-k8s-hub 4.3.5-r0, py3-jupyterhub 5.4.6-r0

CVE-2026-42304 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MF83934 Security fix for CVE-2026-44307 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r3, airflow-3 3.2.0-r0, apache-superset 5.0.0-r7, jupyterhub-k8s-hub 4.3.5-r0, py3-jupyterhub 5.4.6-r0

CVE-2026-44307 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JG72912 Security fix for CVE-2026-34073 applied in: airflow-2 2.10.3-r2, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r0, kserve-storage-controller 0.19.0-r0

CVE-2026-34073 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MP46528 Security fix for ghsa-78cv-mqj4-43f7 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r0

ghsa-78cv-mqj4-43f7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HQ36260 Security fix for CVE-2026-30922 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r0

CVE-2026-30922 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KC70248 Security fix for CVE-2026-31958 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r0

CVE-2026-31958 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AJ13963 Security fix for CVE-2026-32597 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r0

CVE-2026-32597 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DB06757 Security fix for CVE-2026-34520 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34520 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK00522 Security fix for CVE-2026-34519 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34519 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK62594 Security fix for CVE-2026-34518 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ER42066 Security fix for CVE-2026-34517 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34517 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RJ21966 Security fix for CVE-2026-34514 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34514 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZI74051 Security fix for CVE-2026-34513 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34513 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QL97043 Security fix for CVE-2026-34525 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34525 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BU01297 Security fix for CVE-2026-34515 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34515 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VG70392 Security fix for CVE-2026-34516 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-34516 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LM62319 Security fix for CVE-2026-22815 applied in: airflow-2 2.10.3-r2, airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, jupyterhub-k8s-hub 4.3.2-r1, kserve-storage-controller 0.19.0-r0

CVE-2026-22815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW90347 Security fix for CVE-2026-33175 applied in: jupyterhub-k8s-hub 4.3.2-r2

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WX65723 Security fix for CVE-2026-34052 applied in: jupyterhub-k8s-hub 4.3.2-r2

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...