Vulnerabilities for jupyter-server-proxy

First version without a known vulnerability: 4.2.0

Details

• GHSA-fvcq-4x64-hqxr2024-06-11

  Jupyter Server Proxy has a reflected XSS issue in host parameter

  Fixed in: 3.2.4, 4.2.0, 7abc9dc5bbb0b4b440548a5375261b8b8192fc22, ff78128087e73fb9d0909e1366f8bf051e8ea878

• GHSA-w3vc-fx9p-wp4v2024-03-20

  Jupyter Server Proxy's Websocket Proxying does not require authentication

  Fixed in: 4.1.1, 3.2.3, 764e499f61a87641916a7a427d4c4b1ac3f321a9, bead903b7c0354b6efd8b4cde94b89afab653e03

• GHSA-gcv9-6737-pjqw2022-01-27

  SSRF vulnerability in jupyter-server-proxy

  Fixed in: 3.2.1, fd31930bacd12188c448c886e0783529436b99eb