Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
jupyter-server/jupyter_server
main @ 1ad110e
13
Fixes
13
CVEs
HIGH
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
jupyter_server/base/handlers.py: most-fixed (3 issues). Treat as high-risk during review.
6 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Path Traversal: Incomplete prefix checking on paths can allow authenticated users to traverse outside the defined workspace and access sibling directories with matching prefixes. Traversal validation must always enforce trailing separators on root directory comparisons.
Cross-Origin Resource Sharing (CORS) Bypass: Using permissive regular expression matching (such as re.match without strict boundary anchors) on the Origin header allows attackers on similar domains (e.g. trusted.example.com.evil.com) to bypass access controls and interact with internal server endpoints.
Open Redirect: Inadequate canonicalization of redirect URLs can leave users vulnerable to open redirect attacks, especially when handling protocol-relative URLs starting with double slashes.