GHSA-384W-5V3F-Q499 Base class whitelist configuration ignored in OAuthenticator

🗓️ 01 Dec 2020 20:25:00Reported by GoogleType

osv🔗 osv.dev👁 20 Views

OAuthenticator whitelist configuration ignored, impacts all users of OAuthenticator 0.12.0 and 0.12.1 with JupyterHub 1.2. Patches and workarounds included

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-26250	2 Dec 202000:54	–	circl
CNNVD	JupyterHub Oauthenticator Security Vulnerability	1 Dec 202000:00	–	cnnvd
CVE	CVE-2020-26250	1 Dec 202020:30	–	cve
Cvelist	CVE-2020-26250 Base class whitelist configuration ignored in OAuthenticator	1 Dec 202020:30	–	cvelist
EUVD	EUVD-2020-0118	7 Oct 202500:30	–	euvd
Github Security Blog	Base class whitelist configuration ignored in OAuthenticator	1 Dec 202020:25	–	github
NVD	CVE-2020-26250	1 Dec 202021:15	–	nvd
OSV	CVE-2020-26250	1 Dec 202021:15	–	osv
OSV	PYSEC-2020-68	1 Dec 202021:15	–	osv
Prion	Design/Logic Flaw	1 Dec 202021:15	–	prion

Source	Link
github	www.github.com/jupyterhub/oauthenticator/security/advisories/GHSA-384w-5v3f-q499
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26250
github	www.github.com/jupyterhub/oauthenticator/commit/a4aac191c16cf6281f3d346615aefa75702b02d7
github	www.github.com/jupyterhub/oauthenticator
github	www.github.com/jupyterhub/oauthenticator/blob/master/docs/source/changelog.md
github	www.github.com/pypa/advisory-database/tree/main/vulns/oauthenticator/PYSEC-2020-68.yaml
jupyterhub	www.jupyterhub.readthedocs.io/en/1.2.2/getting-started/authenticators-users-basics.html

08 Jul 2026 06:28Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.3

CVSS 48.3

EPSS0.01108