Highlights from the Project Jupyter Mini Summit 2026
Report of the Project Jupyter Mini Summit on 6 Oct 2026 in Prague
Jupyter's security practice and infrastructure, including policies, tooling, audits, programs, and guidance.
Jupyter Security Council Updates
Current Jupyter Security Council initiatives and how AI security reports are impacting Project Jupyter.
Jupyter Security Sprint March 31st
This is a critical moment for open source software. AI enables new contributors in new ways, but maintainers are also faced with an unprecedented volume of contributions and security reports. This speed also puts pressure on maintainers and the processes that keep projects secure and reliable.
European Commission Funds Jupyter Bug Bounty Program
Three Jupyter Subprojects – Jupyter Server, JupyterLab, and JupyterHub –are participating in a bug bounty program sponsored by the European Commission and hosted on the Intigriti platform.
Requiring 2FA for Jupyter GitHub Organizations
This requirement and the outlined plan was discussed and agreed upon at the Jupyter Governance meeting on Friday, July 1, 2022.
Securely pushing to GitHub from a JupyterHub with gh-scoped-creds
Many JupyterHub users want to push and pull their content from GitHub in order to collaborate and share their work.
Please don’t disable authentication in Jupyter servers
We are aware of ransomware attacks specifically targeting Jupyter servers.
Trusted CI Cybersecurity Engagement with Jupyter
Trusted CI is the US National Science Foundation Cybersecurity Center of Excellence, staffed by cybersecurity experts who have spent decades working with science and engineering communities and who have established track records in terms of usable, high-quality solutions suited to the needs of…
Jupyter’s role in #ChaosDB
On August 26 it was revealed that a misconfiguration in Microsoft’s internal deployment of CosmosDB using Jupyter would allow attackers to access all customer data. Fortunately, they report no evidence that customer data was compromised.
Public Notebooks and Security
tl;dr: don’t disable notebook authentication!