Skip to content

Bokeh server applications have Incomplete Origin Validation in WebSockets

Moderate severity GitHub Reviewed Published Jan 6, 2026 in bokeh/bokeh • Updated Jan 8, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts