jupyterhub

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

jupyterhub records in CISA KEV

No jupyterhub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

First Use Authenticator 1 record MEDIUM Kubespawner 1 record LOW Nbgitpuller 1 record MEDIUM Systemdspawner 1 record LOW

Records

1 record in Kubespawner · all components

TI-2020-11885 CVE-2020-15110 · GHSA-v7m9-9497-p9gr

Possible pod name collisions in jupyterhub-kubespawner

LOW 37

In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01114 Published 2020-07-17 Fixed in 0.12, 0.12.0 CWE-863

Open these records in search →

Critical	8
High	9
Medium	6
Low	1
No CVSS	0