jhub-shibboleth-auth (1.0.0) potentially affected by CVE-2026-54338 via jupyterhub (0.8.1)

jupyterhub PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.0.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jhub-shibboleth-auth (1.1.0) potentially affected by CVE-2026-54338 via jupyterhub (0.9.0)

jupyterhub PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jhub-shibboleth-auth (1.4.0) potentially affected by CVE-2026-54338 via jupyterhub (0.9.4)

jupyterhub PYPI version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.4.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-54338 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

conda-store (>=2024.6.1, <=2024.11.2) potentially affected by CVE-2026-54338 via jupyterhub (2.0.0rc5)

jupyterhub PYPI version 2.0.0rc5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - conda-store =2024.6.1, =2024.11.2 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2026-54338 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

swanhub (1.0.0), swannotificationsservice (1.0.0) potentially affected by CVE-2026-54338 via jupyterhub (4.0.2)

jupyterhub PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - swanhub 1.0.0 - swannotificationsservice 1.0.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jupyterhub-usage-quotas (>=0.1.3, <=0.1.5), keycloakauthenticator (>=4.0.5, <=4.0.13) +5 more potentially affected by CVE-2026-54338 via jupyterhub (>=5.0.0b2, <=5.4.6)

jupyterhub PYPI version =5.0.0b2, =0.1.3, =4.0.5, =0.1.0, =1.0.11, =1.0.3, =1.2.37, =0.1.4, =0.1.7 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

CVE-2026-54338

creationtimestamp| type| source ---|---|--- 2026-08-25 20:33:25+00:00| seen| https://gist.github.com/alon710/4b4569a59147cbf248fba613069c312c...

cylc-uiserver (0.3.0), ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2026-54338 via jupyterhub (1.3.0)

jupyterhub PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - cylc-uiserver 0.3.0 - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

dapla-team-cli (>=0.2.0, <=0.2.2), dapla-toolbelt-pseudo (>=0.1.0, <=0.4.0) +15 more potentially affected by CVE-2026-54338 via jupyterhub (4.1.6)

jupyterhub PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - dapla-team-cli =0.2.0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.11.0, =0.2.0, =1.0.2, =0.1.0, =1.1.9, =0.5.0, =0.10.0 - ssb-datadoc 0.1.4 and more...

jupyterhub-usage-quotas (>=0.1.3, <=0.1.5), keycloakauthenticator (>=4.0.5, <=4.0.13) +5 more potentially affected by CVE-2026-54338 via jupyterhub (>=5.0.0b2, <=5.4.6)

jupyterhub PYPI version =5.0.0b2, =0.1.3, =4.0.5, =0.1.0, =1.0.11, =1.0.3, =1.2.37, =0.1.4, =0.1.7 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

jupyterhub-usage-quotas (>=0.1.3, <=0.1.5), keycloakauthenticator (>=4.0.5, <=4.0.13) +5 more potentially affected by CVE-2026-54338 via jupyterhub (>=5.0.0b2, <=5.4.6)

jupyterhub PYPI version =5.0.0b2, =0.1.3, =4.0.5, =0.1.0, =1.0.11, =1.0.3, =1.2.37, =0.1.4, =0.1.7 Source cves: CVE-2026-54338 Source advisory: SNYK:PYTHON-JUPYTERHUB-18592368...

conda-store (>=2024.6.1, <=2024.11.2), cylc-uiserver (>=0.1.0, <=0.3.0) +29 more potentially affected by CVE-2026-54338 via jupyterhub (>=0.8.1, <=5.4.6)

jupyterhub PYPI version =0.8.1, =2024.6.1, =0.1.0, =0.0.4, =1.3.7, =0.1.0, =0.2.0, =1.0.0, =1.0.0, =0.2.0, =0.11.0, =0.1.0, =0.0.0, =0.1.3, =0.1.5 - kbatch-proxy 0.4.2 and more Source cves: CVE-2026-54338 Source advisory: MEND:CVE-2026-54338...