Skip to content

GHSA lookup

GHSA-5789-5FC7-67V3

Pruva has a verified reproduction for GHSA-5789-5FC7-67V3: Jupyter Server: path traversal via faulty startswith() root containment check. The canonical evidence record is REPRO-2026-00153.

REPRO

REPRO-2026-00153

Package

jupyter-server · pip

Severity

HIGH

Status

published