Skip to content
OpenAdvisories

Package · Wolfi

py3-oauthenticator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2024-37300

    Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0

    OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub. JupyterHub < 5.0, when used with `GlobusOAuthenticator`, could be configured to allow all users from a particular institution only. This worked fine pr…

    jupyterhub oauthenticator oauthenticator py3-oauthenticator Wolfi PyPI
  • High 7.5
    CVE-2024-29033

    GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace

    OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider. `GoogleOAuthenticator.hosted_domain` is used to restrict what Google accounts can be author…

    jupyterhub oauthenticator oauthenticator py3-oauthenticator Wolfi PyPI