CVE-2024-28188: Jupyter Scheduler

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of `jupyter-scheduler` users maybe be exposed, potentially revealing information about projects that a specific user may be working on. This vulnerability has been patched in version(s) 1.1.6, 1.2.1, 1.8.2 and 2.5.2.

Affected products

• Jupyter Scheduler: from 1.0.0, up to and including 1.1.5; version 1.2.0 only; from 1.3.0, up to and including 1.8.1; from 2.0.0, up to and including 2.5.1
• Jupyter-Server Jupyter-Scheduler: from 1.0.0, up to and including 1.1.5; version 1.2.0 only; from 1.3.0, up to and including 1.8.1; from 2.0.0, up to and including 2.5.1

Published 2024-05-23. Last modified 2026-06-17.