CLEANSTART-2026-OT17051 Security fixes in jupyterhub-k8s-hub 4.3.2-r2

Package jupyterhub-k8s-hub version 4.3.2-r2 fixes 2 vulnerabilities: CVE-2026-34052, CVE-2026-33175...

CVE-2026-34052 vulnerabilities

Vulnerabilities for packages: py3-jupyterhub-ltiauthenticator...

CVE-2026-34052

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send...

CVE-2026-34052 LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send...