CVE-2025-61669
Medium · 6.1CVSS
6.1
EPSS
0.2%
Published
May 5, 2026
CISA due date
—
The record
Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redirect_safe()`, which allows redirects to arbitrary external domains via values such as `///example.com`. An attacker can use a crafted login URL to redirect users to a malicious site and facilitate phishing attacks. This issue is fixed in version 2.18.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | python-jupyter-server | 0 | 2.18.1-1.1 |
Related vulnerabilities
- CVE-2026-44727 Jupyter Server is the backend for Jupyter web applications. Also affects python-jupyter-server
- CVE-2026-5422 A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an… Also affects python-jupyter-server
- CVE-2026-40110 Jupyter Server is the backend for Jupyter web applications. Also affects python-jupyter-server
- CVE-2026-40934 Jupyter Server is the backend for Jupyter web applications. Also affects python-jupyter-server
- CVE-2026-35397 Jupyter Server is the backend for Jupyter web applications. Also affects python-jupyter-server
- CVE-2026-87945 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO… CWE-601
- CVE-2026-87937 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central… CWE-601
- CVE-2026-112034 A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. CWE-601