fabricauthenticator (>=0.0.2.5, <=1.3.4), jupyterhub-ltiauthenticator (1.3.0) +11 more potentially affected by CVE-2024-29033 via oauthenticator (>=0.13.0, <=16.2.1)

oauthenticator PYPI version =0.13.0, =0.0.2.5, =0.11.0, =0.9.1, =3.0.0, =1.0.2, =0.1.0, =1.1.9, =0.5.0, =0.30.1, =0.2.25, =0.0.2, =0.4.2 Source cves: CVE-2024-29033 Source advisory: MEND:CVE-2024-29033...

GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace

Summary and impact GoogleOAuthenticator.hosteddomain is used to restrict what Google accounts can be authorized to access a JupyterHub. The restriction is intended to ensure Google accounts are part of one or more Google organizations/workspaces verified to control specified domains. The...

GHSA-55M3-44XF-HG4H vulnerabilities

Vulnerabilities for packages: py3-oauthenticator...

GHSA-55M3-44XF-HG4H vulnerabilities

Vulnerabilities for packages: py3-oauthenticator...

ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2024-29033 via oauthenticator (14.0.0)

oauthenticator PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +2 more potentially affected by CVE-2024-29033 via oauthenticator (0.13.0)

oauthenticator PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - jupyterhubutils =0.11.0, =0.9.1, =0.30.1, =0.0.2, =0.4.2 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

keycloakauthenticator (>=3.0.0, <=3.1.0) potentially affected by CVE-2024-29033 via oauthenticator (14.2.0)

oauthenticator PYPI version 14.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - keycloakauthenticator =3.0.0, =3.1.0 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

keycloakauthenticator (>=3.1.1, <=3.3.0) potentially affected by CVE-2024-29033 via oauthenticator (15.0.0)

oauthenticator PYPI version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - keycloakauthenticator =3.1.1, =3.3.0 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

fabricauthenticator (>=1.3.1b0, <=1.3.4), nomad-catalysis (>=1.0.2, <=1.0.7) +4 more potentially affected by CVE-2024-29033 via oauthenticator (15.1.0)

oauthenticator PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - fabricauthenticator =1.3.1b0, =1.0.2, =0.1.0, =1.1.9, =0.5.0, =0.10.0 Source cves: CVE-2024-29033 Source advisory:...

fabricauthenticator (>=0.0.2.5, <=0.0.2.7), jupyterhub-ltiauthenticator (1.3.0) +1 more potentially affected by CVE-2024-29033 via oauthenticator (>=16.1.0, <=16.2.1)

oauthenticator PYPI version =16.1.0, =0.0.2.5, =4.0.0, =4.0.4 Source cves: CVE-2024-29033 Source advisory: OSV:GHSA-55M3-44XF-HG4H...

fabricauthenticator (>=0.0.2.5, <=0.0.2.7), jupyterhub-ltiauthenticator (1.3.0) +1 more potentially affected by CVE-2024-29033 via oauthenticator (>=16.1.0, <=16.2.1)

oauthenticator PYPI version =16.1.0, =0.0.2.5, =4.0.0, =4.0.4 Source cves: CVE-2024-29033 Source advisory: GHSA-55M3-44XF-HG4H...

OAuthenticator security vulnerability

OAuthenticator is an OAuth token library for the JupyerHub login handler. A security vulnerability exists in OAuthenticator versions prior to 16.3.0 that stems from incorrectly validating membership...

PT-2024-22686

Name of the Vulnerable Software and Affected Versions oauthenticator versions prior to 16.3.0 Description The issue is related to the GoogleOAuthenticator.hosted domain parameter, which is intended to restrict access to Google accounts that are part of one or more Google organizations verified to...

CVE-2024-29033: Improper Authorization

OAuthenticator provides plugins for JupyterHub to use common OAuth providers, as well as base classes for writing one's own Authenticators with any OAuth 2.0 provider. GoogleOAuthenticator.hosteddomain is used to restrict what Google accounts can be authorized access to a JupyterHub. The...

CVE-2022-31027

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a given institute. The allowedidps...

Authorization

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a given institute. The allowedidps...

PYSEC-2022-206

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a given institute. The allowedidps...

keycloakauthenticator (>=3.0.0, <=3.1.0) potentially affected by CVE-2022-31027 via oauthenticator (14.2.0)

oauthenticator PYPI version 14.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - keycloakauthenticator =3.0.0, =3.1.0 Source cves: CVE-2022-31027 Source advisory: OSV:PYSEC-2022-206...

jupyterhubutils (>=0.11.0, <=0.25.0), jupyterlabutils (>=0.9.1, <=0.10.0) +2 more potentially affected by CVE-2022-31027 via oauthenticator (0.13.0)

oauthenticator PYPI version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - jupyterhubutils =0.11.0, =0.9.1, =0.30.1, =0.0.2, =0.4.2 Source cves: CVE-2022-31027 Source advisory: OSV:PYSEC-2022-206...

ssb-ipython-kernels (>=0.2.25, <=0.3.2) potentially affected by CVE-2022-31027 via oauthenticator (14.0.0)

oauthenticator PYPI version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on oauthenticator and may be impacted: - ssb-ipython-kernels =0.2.25, =0.3.2 Source cves: CVE-2022-31027 Source advisory: OSV:PYSEC-2022-206...