Skip to content
OpenAdvisories

Package · PyPI

oauthenticator

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.2
    CVE-2022-31027

    Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator

    OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a gi…

    jupyterhub oauthenticator oauthenticator PyPI
  • Medium 6.3
    CVE-2020-26250

    Base class whitelist configuration ignored in OAuthenticator

    OAuthenticator is an OAuth login mechanism for JupyterHub. In oauthenticator from version 0.12.0 and before 0.12.2, the deprecated (in jupyterhub 1.2) configuration `Authenticator.whitelist`, which should be transparently mapped to `Authenticator.allowed_user…

    jupyterhub oauthenticator oauthenticator PyPI