https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:45.951052+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2025-61669 CVE-2025-61669 — jupyter_server next parameter open redirect can redirect users to external domains 2026-09-30T23:09:45.960839+00:00

Affected: jupyter-server jupyter_server

Jupyter Server is the backend for Jupyter web applications. In jupyter_server versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in `LoginFormHandler._redirect_safe()`, which allows redirects to arbitrary external domains via values such as `///example.com`. An attacker can use a crafted login URL to redirect users to a malicious site and facilitate phishing attacks. This issue is fixed in version 2.18.0.