LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)

SummaryThe LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a...