MEDIUM6.3PyPI
GHSA-384w-5v3f-q499· CVE-2020-26250, PYSEC-2020-68Base class whitelist configuration ignored in OAuthenticator
Modified: 7/8/2026
package
PyPI/oauthenticator
pkg:pypi/oauthenticator
HIGH7.5PyPI
GHSA-55m3-44xf-hg4h· CVE-2024-29033, PYSEC-2026-1710GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-8x3m-m3x9-54fj· CVE-2018-7206, PYSEC-2018-68JupyterHub OAuthenticator elevation of privilege
Modified: 12/3/2024
HIGH8.1PyPI
GHSA-gprj-3p75-f996· CVE-2024-37300, PYSEC-2026-1711Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0
Modified: 9/10/2026
MEDIUM4.2PyPI
GHSA-r7v4-jwx9-wx43· CVE-2022-31027, PYSEC-2022-206Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator
Modified: 11/8/2023
HIGH8.8PyPI
GHSA-rrvg-cxh4-qhrv· CVE-2026-33175, PYSEC-2026-2238Auth0OAuthenticator has an Authentication Bypass via Unverified Email Claims
Modified: 9/10/2026
—PyPI
PYSEC-2018-68· CVE-2018-7206, GHSA-8x3m-m3x9-54fjModified: 11/22/2024
—PyPI
PYSEC-2020-68· CVE-2020-26250, GHSA-384w-5v3f-q499Modified: 11/8/2023
—PyPI
PYSEC-2022-206· CVE-2022-31027, GHSA-r7v4-jwx9-wx43Modified: 11/8/2023
HIGH7.5PyPI
PYSEC-2026-1710· CVE-2024-29033, GHSA-55m3-44xf-hg4hGoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace
Modified: 7/7/2026
HIGH8.1PyPI
PYSEC-2026-1711· CVE-2024-37300, GHSA-gprj-3p75-f996Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-2238· CVE-2026-33175, GHSA-rrvg-cxh4-qhrvModified: 7/13/2026