Vulnerabilities (CVE)

Filtered by vendor Jupyterhub Subscribe
Filtered by product Systemdspawner
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-26261 1 Jupyterhub 1 Systemdspawner 2024-02-28 3.3 LOW 7.9 HIGH
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. This is patched in jupyterhub-systemdspawner v0.15