EUVD-2020-0093

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Jupyterhub-systemdspawner before v0.15 exposes user API tokens to all users; patched in v0.15

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-26261	9 Dec 202020:32	–	circl
CNNVD	JupyterHub Security Breach	9 Dec 202000:00	–	cnnvd
CVE	CVE-2020-26261	9 Dec 202016:30	–	cve
Cvelist	CVE-2020-26261 user-readable api tokens in systemd units	9 Dec 202016:30	–	cvelist
Github Security Blog	user-readable api tokens in systemd units for JupyterHub	9 Dec 202016:27	–	github
NVD	CVE-2020-26261	9 Dec 202017:15	–	nvd
OSV	GHSA-CG54-GPGR-4RM6 user-readable api tokens in systemd units for JupyterHub	9 Dec 202016:27	–	osv
OSV	PYSEC-2020-52	9 Dec 202017:15	–	osv
Prion	Design/Logic Flaw	9 Dec 202017:15	–	prion
PyPA	PYSEC-2020-52	9 Dec 202017:15	–	pypa

[
  {
    "enisaIdVendor": [
      {
        "id": "428c197d-8ac2-3ad6-afac-d6df496ca2ff",
        "vendor": {
          "name": "jupyterhub"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e2b95f32-c0ef-38b7-804b-d9e6021b1c36",
        "product": {
          "name": "systemdspawner"
        },
        "product_version": "< 0.15"
      }
    ]
  }
]

Source	Link
github	www.github.com/jupyterhub/systemdspawner/security/advisories/GHSA-cg54-gpgr-4rm6
github	www.github.com/jupyterhub/systemdspawner/commit/a4d08fd2ade1cfd0ef2c29dc221e649345f23580
pypi	www.pypi.org/project/jupyterhub-systemdspawner/
github	www.github.com/jupyterhub/systemdspawner/blob/master/CHANGELOG.md
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26261
github	www.github.com/pypa/advisory-database/tree/main/vulns/jupyterhub-systemdspawner/PYSEC-2020-52.yaml
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.8High risk

Vulners AI Score7.8

CVSS 3.17.9

CVSS 23.3

EPSS0.00162

jupyterhub security vulnerability systemdspawner api token exposure patch