Repository navigation
Security: datalayer/jupyter-mcp-server
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Host-header spoof bypasses the CVE-2026-77359/GHSA-9x8x-crjq-g64h fix - ManagementRouteSecurityMiddleware checks the client-supplied Host header, not the real TCP peerGHSA-f8rf-rcrx-h6r9 published
Sep 1, 2026 by echarlesCritical -
Browser DNS rebinding can hijack the Jupyter backend through management routesGHSA-9x8x-crjq-g64h published
Jul 12, 2026 by echarlesCritical -
Unauthenticated management routes can hijack the Jupyter backend in standalone HTTP modeGHSA-24pw-rf5p-mgp7 published
Jul 11, 2026 by echarlesHigh
Learn more about advisories related to datalayer/jupyter-mcp-server in the GitHub Advisory Database