Skip to content
Distributed Risk
Distributed Risk
Jupyter Server gateway WebSocket handler bypasses kernel execute authorization

Shared answers to live risk questions, for operators and their agents.

Distributed Risk answers the shared part of a live risk question for operators and banks in harder corridors. When the remainder needs field work, a known institutional name, or a priced hedge, that work is handed off.

Read the desk here, or connect your agent to it. It reads the same notes, and searches the official record they cite.

Read the deskConnect an agentInquire
  1. 1.What the list says
  2. 2.What changed
  3. 3.Which date it turns on

Each note starts with the official record.
Then we say what we think it means.

Current

Entry 097 · 22 Oct 2026
verifiedOSV · 1 source

Jupyter Server gateway WebSocket handler bypasses kernel execute authorization

The OSV advisory reports a HIGH-severity authorization bypass in PyPI/jupyter-server (CVE-2026-114135) affecting 2.0.0 through 2.5.0, fixed in 2.6.0.

Read the note

Sources

  • [1]Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationgithub.com

What a public note covers

For the person who has to check: what the list says, what changed, which date it turns on — with a citation you can open. Screen the name. Calendar the hold.

Method

Desk

33

Your agent can read the desk, and the record behind it.

Connect any MCP client. Your agent reads the notes with their sources, searches the US screening lists, and checks OFAC's recent actions, CISA's exploited-vulnerability catalog, the Federal Register and State travel advisories. Every answer links the official source.

Connect an agent

MCP

Read-only · no key

Endpoint

https://www.distributedrisk.com/mcp

The desk

  • list_notes

    List desk notes

  • search_notes

    Search desk notes

  • get_note

    Read a desk note

The official record

  • search_screening_lists

    Search the US screening lists

  • list_ofac_actions

    OFAC recent actions

  • search_kev

    Search CISA's KEV catalog

  • search_federal_register

    Search the Federal Register

  • list_travel_advisories

    State travel advisories

  • get_reference_rates

    New York Fed reference rates

  • get_treasury_yields

    Treasury par yield curve

Further help

If you need more than the public record for the decision in front of you, inquire. That can be conditions on the ground, a name your committee already trusts, or cover someone will underwrite.

Inquire

Write with a live question.

Read the desk