Jupyter Security Sprint March 31st
This is a critical moment for open source software. AI enables new contributors in new ways, but maintainers are also faced with an unprecedented...
security
European Commission Funds Jupyter Bug Bounty Program
Three Jupyter Subprojects – Jupyter Server, JupyterLab, and JupyterHub –are participating in a bug bounty program sponsored by the European...
Requiring 2FA for Jupyter GitHub Organizations
This requirement and the outlined plan was discussed and agreed upon at the Jupyter Governance meeting on Friday, July 1, 2022.
Please don’t disable authentication in Jupyter servers
We are aware of ransomware attacks specifically targeting Jupyter servers.
Trusted CI Cybersecurity Engagement with Jupyter
Trusted CI is the US National Science Foundation Cybersecurity Center of Excellence, staffed by cybersecurity experts who have spent decades...
Jupyter’s role in #ChaosDB
On August 26 it was revealed that a misconfiguration in Microsoft’s internal deployment of CosmosDB using Jupyter would allow attackers to access...
CVE-2021-32797 and CVE-2021-32798 Remote Code execution in JupyterLab and Jupyter Notebook
TL:DR; All recent JupyterLab and Notebook versions are susceptible to a attack where a maliciously crafted notebook can trigger arbitrary code...
Open Redirect Vulnerability in Jupyter notebook, JupyterHub
Update: notebook 5.7.7 and JupyterHub 0.9.5 contained incomplete fixes for this issue. 5.7.8 and 0.9.6 are released with more complete fixes.
Jupyter notebook XSSI security fix
We have just released Jupyter notebook 5.7.6 with a security fix for a cross-site inclusion (XSSI) vulnerability, where content from a Jupyter...
Jupyter Notebook security fixes
Two security issues have been found and fixed this week, where untrusted javascript could be executed if malicious files could be delivered to the...
Security fix for Jupyter Notebook
We have just released Jupyter Notebook 5.6.0. This release fixes a vulnerability that could allow a maliciously crafted notebook to execute...
Security fix for JupyterHub GitLab OAuthenticator Group Whitelists
This vulnerability has been assigned CVE-2018-7206
Public Notebooks and Security
tl;dr: don’t disable notebook authentication!
Security release: Jupyter Notebook 4.3.1
We have just released Jupyter Notebook 4.3.0 and 4.3.1 with some important security fixes.
ipywidget security release
A version of ipywidget has been released, which fixes important security issues.
Notebook 4.2.2: Security fix
TL;DR: upgrade to notebook 4.2.2