UBUNTU-CVE-2025-61669

Jupyter Server is the backend for Jupyter web applications. In jupyterserver versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in LoginFormHandler.redirectsafe, which allows redirects to arbitrary external domains via values such as ///example.com. An...

CVE-2025-61669

creationtimestamp| type| source ---|---|--- 2026-05-05 13:11:10+00:00| published-proof-of-concept| https://github.com/jupyter-server/jupyterserver/security/advisories/GHSA-qh7q-6qm3-653w 2026-05-05 17:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4o6ghliq2r 2026-05-27...