JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to
    version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which,
    when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-
    controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent
    this. This issue has been patched in version 5.4.4. (CVE-2026-33709)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to     version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which,     when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-     controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent     this. This issue has been patched in version 5.4.4. (CVE-2026-33709)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
440931	SCA: security update for jupyterhub (GHSA-3vff-hjqv-m7h8)	Tenable Cloud Security	SCA Checks	medium
440931	SCA: security update for jupyterhub (GHSA-3vff-hjqv-m7h8)	Tenable Self-Hosted Container Security	SCA Checks	medium
305006	Linux Distros Unpatched Vulnerability : CVE-2026-33709	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-33709

medium

Tenable Plugins

medium

medium

medium