PYSEC-2022-206

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a given institute. The allowedidps...

PT-2022-20471

Name of the Vulnerable Software and Affected Versions CILogonOAuthenticator versions prior to 15.0.0 Description The issue concerns the authorization mechanism in CILogonOAuthenticator, which is used to restrict access to a JupyterHub based on the user's institution. The allowed idps configuratio...