Vulnerabilities
Report: CVE-2026-35397 - jupyter-server path traversal allows access to sibling directories sharing root_
CVE ID :CVE-2026-35397 Published : May 5, 2026, 7:37 p.m. | 48 minutes ago Description :Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured root_dir and access sibling directories whose names begin with the same prefix as the root_dir. For example, with a root_dir named