1 matches found
PYSEC-2026-2532 Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()
A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...