Skip to content
Threat Feed
Subscribe

Product

JupyterHub

2 briefs RSS
high advisory

JupyterHub: Multiple vulnerabilities allowing privilege escalation and unauthorized access

Multiple vulnerabilities in JupyterHub allow a remote, authenticated attacker to achieve privilege escalation, bypass security measures, manipulate data, and trigger a denial-of-service.

JupyterHub vulnerability privilege-escalation web-application
high advisory

JupyterHub Extension Manager API/GUI Policy Discrepancy Allows Malicious Extension Installation

JupyterLab versions prior to 4.5.7 do not correctly enforce the allow-list of extensions that can be installed from PyPI Extension Manager, allowing authenticated attackers to escalate privileges and potentially exfiltrate data, move laterally, and persistently compromise server infrastructure.

JupyterHub +2 jupyterlab privilege-escalation vulnerability extension-manager
2r 1t