CVE-2023-48311

dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying DockerSpawner.allowedimages configuration allow users to launch any pullable docker image, instead of restricting to...

CVE-2023-48311 Any image allowed by default

dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying DockerSpawner.allowedimages configuration allow users to launch any pullable docker image, instead of restricting to...

CVE-2023-48311

CVE-2023-48311 affects dockerspawner for JupyterHub deployments. Versions 0.11.0 through 12 (and up to 13 in some advisories) permit users to launch any pullable Docker image when DockerSpawner.allowed_images is not explicitly restricted, instead of only the configured image. Root cause: misconfi...

swanspawner (>=0.2.0 <=1.2.48), tljh-repo2docker (>=1.0.1 <=2.0.0a5) potentially affected by CVE-2023-48311 via dockerspawner (>=0.11.1 <=12.1.0)

dockerspawner PYPI version =0.11.1, =0.2.0, =1.0.1, =2.0.0a5 Source cves: CVE-2023-48311 Source advisory: OSV:GHSA-HFGR-H3VC-P6C2...