Product by Jupyterhub
Oauthenticator
5 known vulnerabilities in Oauthenticator (Jupyterhub), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-33175 | OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims | 8.8 | |
| Medium | CVE-2020-26250 | Base class whitelist configuration ignored in OAuthenticator | 6.3 | |
| Critical | CVE-2024-29033 | Jupyterhub Oauthenticator: Improper Authorization | 7.5 | |
| High | CVE-2024-37300 | Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0 | 8.1 | |
| Medium | CVE-2022-31027 | Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator in oauthenticator | 4.2 |