Linux Distros Unpatched Vulnerability : CVE-2024-41942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-41942 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

jhub-shibboleth-auth (1.2.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.1)

jupyterhub PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.2.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

jhub-shibboleth-auth (1.4.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.4)

jupyterhub PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.4.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

swanhub (1.0.0), swannotificationsservice (1.0.0) potentially affected by CVE-2024-41942 via jupyterhub (4.0.2)

jupyterhub PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - swanhub 1.0.0 - swannotificationsservice 1.0.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

CVE-2024-41942 vulnerabilities

Vulnerabilities for packages: py3-jupyterhub...

rubin-jupyter-utils-lab (>=0.10.0, <=0.13.0), swannotificationsservice (0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (1.5.1)

jupyterhub PYPI version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - rubin-jupyter-utils-lab =0.10.0, =0.13.0 - swannotificationsservice 0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-84...

jhub-shibboleth-auth (1.0.0) potentially affected by CVE-2024-41942 via jupyterhub (0.8.1)

jupyterhub PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.0.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...

cylc-uiserver (0.2.0), jhub-swarmspawner (>=0.2.4, <=0.2.6) +1 more potentially affected by CVE-2024-41942 via jupyterhub (1.1.0)

jupyterhub PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.2.0 - jhub-swarmspawner =0.2.4, =0.0.1, =0.0.3 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...

jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2024-41942 via jupyterhub (0.9.0)

jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...

jhub-shibboleth-auth (1.5.0), jupyterhub-ltiauthenticator (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2024-41942 via jupyterhub (0.9.6)

jupyterhub PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.5.0 - jupyterhub-ltiauthenticator =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2024-41942 Source advisory:...

CVE-2024-41942 JupyterHub has a privilege escalation vulnerability with the `admin:users` scope

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the admin:users scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that...