CVE-2024-28179

Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server Proxy did not check user authentication appropriately when proxying websockets, allowing...

CVE-2024-28179

CVE-2024-28179 affects the jupyter-server-proxy component prior to versions 3.2.3 and 4.1.1, where websocket proxying did not enforce authentication, enabling unauthenticated remote access to any websocket endpoint exposed via Jupyter Server Proxy. The websocket endpoints provided by jupyter_serv...

grid2viz (>=1.1.0 <=1.3.1), lftakakura-mage-ai (=0.9.37a1) +2 more potentially affected by CVE-2024-28179 via jupyter-server-proxy (>=1.3.2 <=3.2.1)

jupyter-server-proxy PYPI version =1.3.2, =1.1.0, =0.0.6, =0.1.4, =0.2.1 Source cves: CVE-2024-28179 Source advisory: OSV:GHSA-W3VC-FX9P-WP4V...

pydisconet (=0.1.0) potentially affected by CVE-2024-28179 via jupyter-server-proxy (=4.1.0)

jupyter-server-proxy PYPI version =4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server-proxy and may be impacted: - pydisconet =0.1.0 Source cves: CVE-2024-28179 Source advisory: OSV:GHSA-W3VC-FX9P-WP4V...