Approved changes feed: RSS · Atom

cpe:2.3:a:jupyter:jupyterhub:1.1.0:-:*:*:*:*:*:*

part: a version: 1.1.0 update: -

VendorJupyter (3170fc95-7dab-5fb9-942d-251eb444755d)
ProductJupyterhub (17080f79-8994-5355-9bfb-a3cb333041b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/jupyterhub/jupyterhub purl2cpe 2026-06-01 10:17:17.475622
pkg:github/jupyterhub/jupyterhub purl2cpe 2026-06-01 10:17:17.475624
pkg:pypi/jupyterhub purl2cpe 2026-06-01 10:17:17.475625

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36191 vulnerable 2026-06-03 14:42:33.256546 Details available
JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).
Published: 2021-01-13T03:36:09.000Z
Updated: 2024-08-04T17:23:09.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.