Packages / Debian 12 (Bookworm) / utils / jupyter-server

Package: jupyter-server (1.23.3-1)

Jupyter protocol server backend (tools)

Other Packages Related to jupyter-server:

dep: [python3-jupyter-server] (= 1.23.3-1)
Jupyter protocol server backend (Python 3)
dep: [python3] [any]
interactive high-level object-oriented language (default python3 version)

Download jupyter-server

Architecture	Package size	Installed size	Files	Package
all	20 KiB	30 KiB	list of files	Download

Chemins de fichiers du paquet (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 12 (Bookworm) main amd64

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Essayer Debian 12 (Bookworm) dans le navigateur Construire une image qui inclut jupyter-server

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.23.3-1	bookworm / main	all	Debian 12 · main · amd64	20 KiB	30 KiB	pool/main/j/jupyter-server/jupyter-server_1.23.3-1_all.deb
1.23.3-1	bookworm / main	all	Debian 12 · main · arm64	20 KiB	30 KiB	pool/main/j/jupyter-server/jupyter-server_1.23.3-1_all.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnérabilités connues

L’association des paquets est en cours.

CVE	Gravité	Impact par version
[CVE-2026-114135] Published: Oct 21, 2026, 7:58:51 PM UTC jupyter-server: CVE-2026-114135	High(8.8)	Inconnu Détails (2) `1.23.3-1` · all · bookworm Inconnu Version impact unknown dsa · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14 `1.23.3-1` · all · bookworm Inconnu Version impact unknown dsa · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14
[CVE-2026-86049] Published: Sep 17, 2026, 8:28:52 PM UTC jupyter-server: CVE-2026-86049	High(7.1)	Inconnu Détails (2) `1.23.3-1` · all · bookworm Inconnu Version impact unknown dsa · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14 `1.23.3-1` · all · bookworm Inconnu Version impact unknown dsa · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14
[CVE-2026-44727] Published: Jun 18, 2026, 3:04:07 PM UTC Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox d	Critical(9.3)	Inconnu Détails (2) `1.23.3-1` · all · bookworm Inconnu · Corrigée: `2.20.0-1` Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14 `1.23.3-1` · all · bookworm Inconnu · Corrigée: `2.20.0-1` Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14
[CVE-2026-6657] Published: Jun 3, 2026, 3:06:56 PM UTC A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration is used. The issue arises from the use of	High(8.8)	Inconnu Détails (2) `1.23.3-1` · all · bookworm Inconnu Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14 `1.23.3-1` · all · bookworm Inconnu Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14
[CVE-2026-5422] Published: Jun 2, 2026, 9:11:15 AM UTC A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.p	High(8.1)	Inconnu Détails (2) `1.23.3-1` · all · bookworm Inconnu Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14 `1.23.3-1` · all · bookworm Inconnu Version impact unknown nvd · jupyter-server · debian · bookworm; pypi · jupyter-server · debian · 12; pypi · jupyter-server · debian · 13; pypi · jupyter-server · debian · 14
[CVE-2026-40934] Published: May 5, 2026, 5:03:24 PM UTC Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentication cookies is persisted to a static file at ~/.local/share/jupyter/runti	High(7.6)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 10:21:37 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12
[CVE-2026-40110] Published: May 5, 2026, 4:54:31 PM UTC Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat	High(7.6)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 10:21:37 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12
[CVE-2026-35397] Published: May 5, 2026, 4:49:10 PM UTC Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_di	High(8.8)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 10:21:37 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12
[CVE-2025-61669] Published: Jan 1, 2025, 12:00:00 AM UTC Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redi	Medium(6.3)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 10:21:37 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée nvd · jupyter-server · debian · bookworm; nvd · jupyter-server · debian · 12
[CVE-2024-35178] Published: Jun 6, 2024, 12:00:00 AM UTC jupyter-server: CVE-2024-35178	High(7.5)	Inconnu L’association des paquets est en cours. Observé: Oct 28, 2026, 4:43:45 PM UTC Détails (2) `1.23.3-1` · all · bookworm Non affectée dsa · jupyter-server · debian · bookworm `1.23.3-1` · all · bookworm Non affectée dsa · jupyter-server · debian · bookworm
[CVE-2023-49080] Published: Dec 4, 2023, 12:00:00 AM UTC jupyter-server: CVE-2023-49080	Medium(4.1)	Inconnu L’association des paquets est en cours. Observé: Oct 28, 2026, 5:43:05 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12
[CVE-2023-39968] Published: Aug 28, 2023, 12:00:00 AM UTC jupyter-server: CVE-2023-39968	Medium(4.3)	Inconnu L’association des paquets est en cours. Observé: Oct 28, 2026, 5:44:16 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12
[CVE-2023-40170] Published: Aug 28, 2023, 12:00:00 AM UTC jupyter-server: CVE-2023-40170	Medium(6.5)	Inconnu L’association des paquets est en cours. Observé: Oct 28, 2026, 5:44:16 PM UTC Détails (2) `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Affectée dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12
[CVE-2022-29241] Published: Jun 14, 2022, 12:00:00 AM UTC jupyter-server: CVE-2022-29241	High(8.8)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 6:26:15 PM UTC Détails (2) `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.17.1-1` dsa · jupyter-server · debian · bookworm `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.17.1-1` dsa · jupyter-server · debian · bookworm
[CVE-2022-24757] Published: Mar 23, 2022, 12:00:00 AM UTC jupyter-server: CVE-2022-24757	Medium	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 6:24:47 PM UTC Détails (2) `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.16.0-1` dsa · jupyter-server · debian · bookworm `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.16.0-1` dsa · jupyter-server · debian · bookworm
[CVE-2020-26275] Published: Dec 21, 2020, 6:15:00 PM UTC jupyter-server: CVE-2020-26275	Medium	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 5:50:02 PM UTC Détails (2) `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.1.1-1` dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.1.1-1` dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12
[CVE-2020-26232] Published: Nov 24, 2020, 9:15:11 PM UTC jupyter-server: CVE-2020-26232	Medium(5.4)	Inconnu L’association des paquets est en cours. Observé: Oct 23, 2026, 5:50:01 PM UTC Détails (2) `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.0.7-1` dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12 `1.23.3-1` · all · bookworm Corrigée · Corrigée: `1.0.7-1` dsa · jupyter-server · debian · bookworm; dsa · jupyter-server · debian · 12

Dernière synchronisation: Oct 29, 2026, 10:36:04 AM UTC

[Catalogue CVE]

Empreintes

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

1.23.3-1 / allObservé Sep 1, 2026sha256 83d1368c1cab…3c1eba38Empreinte publiée par la source

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Empreinte publiée par la source (sha256): 83d1368c1cabf3fd7841c145f1da0ac61e8559407bfb46069103897a3c1eba38

Vérifier le téléchargement

printf '%s  %s\n' '83d1368c1cabf3fd7841c145f1da0ac61e8559407bfb46069103897a3c1eba38' 'jupyter-server_1.23.3-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

1.23.3-1 / allObservé Sep 1, 2026sha256 83d1368c1cab…3c1eba38Empreinte publiée par la source

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Empreinte publiée par la source (sha256): 83d1368c1cabf3fd7841c145f1da0ac61e8559407bfb46069103897a3c1eba38

Vérifier le téléchargement

printf '%s  %s\n' '83d1368c1cabf3fd7841c145f1da0ac61e8559407bfb46069103897a3c1eba38' 'jupyter-server_1.23.3-1_all.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Sources

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Preuve de signature
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Preuve de signature
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified