Vendor
jupyterhub
Public exploit1Avg CVSS7.4
CVEs in the catalog
23
since 2020-07
Months in the top 100
3
months with a stored rank
Best rank
#40
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| jupyterhub | 6 | 26% |
| oauthenticator | 5 | 22% |
| jupyter server proxy | 3 | 13% |
| ltiauthenticator | 2 | 9% |
| binderhub | 1 | 4% |
| dockerspawner | 1 | 4% |
| firstuseauthenticator | 1 | 4% |
| jupyter remote desktop proxy | 1 | 4% |
| kubespawner | 1 | 4% |
| nbgitpuller | 1 | 4% |
| systemdspawner | 1 | 4% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-863 | 3 | 13% |
| CWE-352 | 2 | 9% |
| CWE-668 | 2 | 9% |
| CWE-79 | 2 | 9% |
| CWE-94 | 2 | 9% |
| CWE-116 | 1 | 4% |
| CWE-20 | 1 | 4% |
| CWE-274 | 1 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-54338 | CWE-400 | none yet | 5.3 | 2026-08-07 |
| CVE-2026-40864 | CWE-352 | 1 | 5.4 | 2026-05-22 |
| CVE-2026-34052 | CWE-401, CWE-770 | none yet | 5.9 | 2026-04-03 |
| CVE-2026-33709 | CWE-601 | none yet | 5.1 | 2026-04-03 |
| CVE-2026-33175 | CWE-287, CWE-290 | none yet | 8.8 | 2026-04-03 |
| CVE-2025-32428 | CWE-668 | none yet | 9 | 2025-04-14 |
| CVE-2023-25574 | CWE-347 | none yet | 10 | 2025-02-25 |
| CVE-2024-41942 | CWE-274 | none yet | 7.2 | 2024-08-08 |
| CVE-2024-37300 | CWE-863 | none yet | 8.1 | 2024-06-12 |
| CVE-2024-35225 | CWE-79, CWE-116 | none yet | 9.7 | 2024-06-11 |
| CVE-2024-28233 | CWE-79, CWE-352 | none yet | 8.1 | 2024-03-27 |
| CVE-2024-29033 | CWE-285 | none yet | 7.5 | 2024-03-20 |
| CVE-2024-28179 | CWE-306 | none yet | 9.1 | 2024-03-20 |
| CVE-2023-48311 | CWE-20 | none yet | 8 | 2023-12-08 |
| CVE-2022-31027 | CWE-639 | none yet | 4.2 | 2022-06-06 |