Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

jupyter-enterprise-gateway

3 known vulnerabilities (3 critical), with the versions each affects and the releases that fix them.

Latest release
3.3.0 (Jun 1, 2026): no advisory affects it
Newest unaffected release
3.3.0 (Jun 1, 2026), the latest release
Advisories
3 · 3 critical
Weekly downloads
2,954
Dependents
0
Releases
42 since 0.6.0 (Oct 18, 2017)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • CVE-2026-44182Critical 10.0

    Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering

    Affected: fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 1, 2026, 45 days before disclosure).

    The latest release, 3.3.0, is not affected.

  • CVE-2026-44181Critical 10.0

    Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution

    Affected: from 2.0.0rc2, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 1, 2026, 45 days before disclosure).

    The latest release, 3.3.0, is not affected.

  • CVE-2026-44180Critical 9.8

    Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed

    Affected: from 2.0.0rc1, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jun 1, 2026, 45 days before disclosure).

    The latest release, 3.3.0, is not affected.