CVE-2026-40864

CVE-2026-40864 — 교차 출처 form POST를 통한 JupyterHub XSRF 우회 Sec-Fetch-Mode: no-cors 심각도 : 중간 CWE : CWE-352 — 사이트 간 요청 위조 XSRF 영향 받는 버전 : jupyterhub 4.1.0 ≤ 버전 5.4.5 패치 버전 5.4.5 권고 : GHSA-m68r-v472-jgq9 NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-40864 발견자 : Romain Deperne TL;DR JupyterHub의 XSRF 보...

EUVD-2026-54678

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login...

Linux Distros Unpatched Vulnerability : CVE-2026-54338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators c...

Logging of Excessive Data

Overview jupyterhub is a JupyterHub: A multi-user server for Jupyter notebooks Affected versions of this package are vulnerable to Logging of Excessive Data via the login process. An attacker can exhaust logging and storage resources by submitting invalid input with excessively large or numerous...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

DEBIAN-CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

UBUNTU-CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338

JupyterHub prior to 5.5.0 is affected by a vulnerability in its form-based login authenticators where invalid input can place an attacker-controlled username into failed-login logs. This can allow an unauthenticated attacker to exhaust logging and storage resources, effectively a denial of servic...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

PT-2026-69151

Name of the Vulnerable Software and Affected Versions JupyterHub versions prior to 5.5.0 Description Invalid input provided to form-based login authenticators allows an unauthenticated attacker to insert an unbounded, attacker-controlled username into failed-login logs. This can lead to the...

CLEANSTART-2026-AE28044 Security fixes in jupyterhub-k8s-hub 4.3.2-r3

Package jupyterhub-k8s-hub version 4.3.2-r3 fixes 2 vulnerabilities: CVE-2026-44432, CVE-2026-44431...

CLEANSTART-2026-KV83814 Security fixes in py3-jupyterhub 5.4.6-r3

Package py3-jupyterhub version 5.4.6-r3 fixes 1 vulnerabilities: ghsa-537c-gmf6-5ccf...

CLEANSTART-2026-CM79279 Security fixes in py3-jupyterhub 5.4.4-r0

Package py3-jupyterhub version 5.4.4-r0 fixes 2 vulnerabilities: CVE-2026-44432, CVE-2026-44431...

CLEANSTART-2026-IM99533 Security fixes in jupyterhub-k8s-hub 4.3.2-r1

Package jupyterhub-k8s-hub version 4.3.2-r1 fixes 10 vulnerabilities: CVE-2026-22815, CVE-2026-34515, CVE-2026-34516, CVE-2026-34525, CVE-2026-34513...

CLEANSTART-2026-IF40239 Security fixes in jupyterhub-k8s-hub 4.3.2-r0

Package jupyterhub-k8s-hub version 4.3.2-r0 fixes 11 vulnerabilities: CVE-2026-32597, CVE-2026-30922, CVE-2026-31958, ghsa-jr27-m4p2-rc6r, ghsa-qjxf-f2mg-c6mc...