Jupyter Security Sprint March 31st
This is a critical moment for open source software. AI enables new contributors in new ways, but maintainers are also faced with an…
security
European Commission Funds Jupyter Bug Bounty Program
Three Jupyter Subprojects – Jupyter Server, JupyterLab, and JupyterHub –are participating in a bug bounty program sponsored by the European…
Requiring 2FA for Jupyter GitHub Organizations
This requirement and the outlined plan was discussed and agreed upon at the Jupyter Governance meeting on Friday, July 1, 2022.
Please don’t disable authentication in Jupyter servers
We are aware of ransomware attacks specifically targeting Jupyter servers.
Trusted CI Cybersecurity Engagement with Jupyter
Trusted CI is the US National Science Foundation Cybersecurity Center of Excellence, staffed by cybersecurity experts who have spent…
Jupyter’s role in #ChaosDB
On August 26 it was revealed that a misconfiguration in Microsoft’s internal deployment of CosmosDB using Jupyter would allow attackers to…
CVE-2021–32797 and CVE-2021–32798 Remote Code execution in JupyterLab and Jupyter Notebook
TL:DR; All recent JupyterLab and Notebook versions are susceptible to a attack where a maliciously crafted notebook can trigger arbitrary…
Open Redirect Vulnerability in Jupyter notebook, JupyterHub
JupyterHub ≤ 0.9.4 and Notebook ≤ 5.7.6 are affected. Versions 0.9.5 and 5.7.7 are released today with fixes. Upgrade with pip or conda:
Jupyter notebook XSSI security fix
We have just released Jupyter notebook 5.7.6 with a security fix for a cross-site inclusion (XSSI) vulnerability, where content from a…
Jupyter Notebook security fixes
Two security issues have been found and fixed this week, where untrusted javascript could be executed if malicious files could be…
Security fix for Jupyter Notebook
We have just released Jupyter Notebook 5.6.0. This release fixes a vulnerability that could allow a maliciously crafted notebook to execute…
Security fix for JupyterHub GitLab OAuthenticator Group Whitelists
This vulnerability has been assigned CVE-2018–7206
Public Notebooks and Security
tl;dr: don’t disable notebook authentication!
Security release: Jupyter Notebook 4.3.1
We have just released Jupyter Notebook 4.3.0 and 4.3.1 with some important security fixes. You can check out the changelog for more details on the...
ipywidget security release
Hello Jovyan, A version of ipywidget has been released, which fixes important security issues. Please upgrade ipywidgets as soon as you can: $ pip...
Notebook 4.2.2: Security fix
TL;DR: upgrade to notebook 4.2.2 We just released notebook 4.2.2 with a few bugfixes and one important security fix. We (specifically Steve...