CVE-2026-40110

Katalog CVE

CVSS 7.3 · High EPSS 0,47%

Kerentanan Regular Expression without Anchors pada jupyter server. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the Origin header validation uses Python's re.match() to check incoming origins against the allow_origin_pat configuration value. Because re.match() only anchors at the start of the string and does not require a full match, a pattern intended to match only a trusted domain (e.g., trusted.example.com) will also match any origin that begins with that domain followed by additional characters (e.g., trusted.example.com.evil.com). An attacker who controls such a domain can bypass the CORS origin restriction and make cross-origin requests to the Jupyter Server API from an untrusted site. This issue has been fixed in version 2.18.0.

Rincian

Terbit di NVD

5 Mei 2026

Terakhir diubah

24 Juli 2026

Status NVD

Modified

CVSS 3.1

7.3 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-777: Regular Expression without Anchors
CWE-625: Permissive Regular Expression

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-24qx-w28j-9m6p mitigasi · patch · advisory vendor
• https://github.com/jupyter-server/jupyter_server/commit/057869a327c46730afede3eab0ca2d2e3e74acea patch
• https://github.com/jupyter-server/jupyter_server/commit/49b34392feaa97735b3b777e3baf8f22f2a14ed8 patch
• https://github.com/jupyter-server/jupyter_server/pull/603 issue tracking
• https://access.redhat.com/errata/RHSA-2026:43038
• https://access.redhat.com/security/cve/CVE-2026-40110
• https://bugzilla.redhat.com/show_bug.cgi?id=2466912
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40110.json