SCA: security update for jupyter-server (GHSA-354v-3q48-cv69)

high Tenable Cloud Security Plugin ID 476861

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling
GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHandler, which
authenticated the user but did not call authorizer.is_authorized(...) for the execute action on the
kernels resource. A restricted authenticated user could therefore open an upstream kernel channel and
obtain kernel execution despite the configured Authorizer denying that action, exposing data and
credentials available to the kernel and permitting modification or disruption of the kernel environment.
The default gateway configuration is fixed in version 2.6.0. In 2.6.0 and later, the same authorization
bypass remains possible when a deployment manually registers the deprecated
jupyter_server.gateway.handlers module, because its handler still omits the configured kernel-execute
authorization decision. (CVE-2026-114135)

Solution

Update the jupyter-server library and its related packages to version 2.6.0 or later.

Plugin Details

Severity: High

ID: 476861

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 10/22/2026

Updated: 10/22/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.51

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-114135

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/22/2026

Vulnerability Publication Date: 10/21/2026

Reference Information

CVE: CVE-2026-114135

cwe: CWE-862

Detections

Analytics