Skip to content

deps: bump jupyter-server to 2.21.0 (GHSA-c3mw-737p-c7g2) - #340

Open
katsugtgz wants to merge 1 commit into
e2b-dev:mainfrom
katsugtgz:deps/jupyter-server-2.21.0
Open

katsugtgz wants to merge 1 commit into
e2b-dev:mainfrom
katsugtgz:deps/jupyter-server-2.21.0

Conversation

@katsugtgz

Copy link
Copy Markdown

Updates jupyter-server to address GHSA-c3mw-737p-c7g2 (CVE-2026-86049, Referer header leak in 5xx request logging).

Evidence:

  • template/requirements.txt pinned jupyter-server==2.20.0
  • pip-audit reported GHSA-c3mw-737p-c7g2 against that pin
  • updated version: 2.21.0

Validation:

  • pip-audit -r template/requirements.txt --no-deps no longer reports the advisory for jupyter-server
  • pip install --dry-run -r template/requirements.txt resolves cleanly with jupyter-server==2.21.0

Scope: dependency pin update only.

@cla-bot

cla-bot Bot commented Sep 19, 2026

Copy link
Copy Markdown

We require contributors to sign our Contributor License Agreement, and we don't have @katsugtgz on file. You can sign our CLA at https://e2b.dev/docs/cla . Once you've signed, post a comment here that says '@cla-bot check'

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant