PYSEC-2020-51
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/jupyterhub-kubespawner/PYSEC-2020-51.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2020-51
- Aliases
- Published
- 2020-07-17T21:15:00Z
- Modified
- 2023-11-08T04:02:29.550274Z
- Summary
- [none]
- Details
-
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.
- References
Affected packages
PyPI / jupyterhub-kubespawner
Package
- Name
- jupyterhub-kubespawner
- View open source insights on deps.dev
- Purl
- pkg:pypi/jupyterhub-kubespawner
Affected ranges
- Type
- GIT
- Repo
- https://github.com/jupyterhub/kubespawner
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed0.12.0