Skip to content
OpenAdvisories

Package · Wolfi

py3-jupyterhub

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2024-41942

    JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

    JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the `admin:users` scope, they may escalate their own privileges by making themselves a full admin user. The imp…

    jupyterhub jupyterhub jupyterhub jupyterhub Debian Ubuntu Wolfi PyPI
  • Critical 10.0
    CVE-2024-38999

    jrburke requirejs vulnerable to prototype pollution

    jrburke requirejs v2.3.6 was discovered to contain a prototype pollution via the function s.contexts._.configure. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    py3.11-jupyterhub py3.10-jupyterhub py3.13-jupyterhub py3.12-jupyterhub Debian Ubuntu Wolfi npm