PYSEC-2018-151

An issue was discovered in Project Jupyter JupyterHub OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. When using JupyterHub with GitLab group whitelisting for access control, group membership was not checked correctly, allowing members not in the whitelisted groups to create accounts on...

CVE-2018-7206

The CVE relates to JupyterHub OAuthenticator in Project Jupyter JupyterHub, where GitLab group whitelisting was not enforced correctly. Affected versions are OAuthenticator 0.6.x before 0.6.2 and 0.7.x before 0.7.3. The flaw could let whitelisted-group members fail to be required for account crea...