What’s Vulnerable › Products

jupyterhub oauthenticator vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your jupyterhub oauthenticator version is affected

Latest jupyterhub oauthenticator vulnerabilities

• CVE-2026-33175 — OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims (CVSS 8.8)
• CVE-2024-37300 — Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0 (CVSS 8.1)
• CVE-2024-29033 — GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace (CVSS 9.1)
• CVE-2022-31027 — Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator (CVSS 6.5)
• CVE-2020-26250 — Base class whitelist configuration ignored in OAuthenticator (CVSS 6.3)
• CVE-2018-7206 — (CVSS 8.8)