Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 2 total.
Library:
jupyter-enterprise-gateway
CVE-2026-44181
CRITICAL
CVSS 10.0
Verified Advisory
Jul 16, 2026
Server Side Template Injection (SSTI) in Jupyter Enterprise Gateway (CVE-2026-44181)
CVE-2026-44181 is a Server Side Template Injection (SSTI) vulnerability in Jupyter Enterprise Gateway affecting the rendering of Kubernetes manifest environment variables (`KERNEL_XXX`). An attacker can inject Jinja2 ...
Fixed in 3.3.0
RCE
Kubernetes
Python
Ssti
CVE-2026-44182
CRITICAL
CVSS 10.0
Verified Advisory
Jul 16, 2026
YAML injection in jupyter-server/enterprise_gateway (CVE-2026-44182)
CVE-2026-44182 is a YAML injection vulnerability in jupyter-server/enterprise_gateway affecting Kubernetes manifest rendering via Jinja2 templates. The server interpolates untrusted `KERNEL_XXX` environment variables ...
Fixed in 3.3.0
Nginx
RCE
Kubernetes