MEDIUM 5.3

GHSA-p43p-whwx-q52h

JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

빠른 조치

GHSA-p43p-whwx-q52h — jupyterhub: 아래 명령으로 수정 버전으로 올리세요.

pip install --upgrade 'jupyterhub>=5.5.0'

상세

### Impact

Invalid input to login resulted in unbounded logging output. Only form-based Authenticators (the default PAM Authenticator, but not the more widely used OAuthenticator) are affected.

### Patches

Upgrade to 5.5.0.

### Workarounds

Use an Authenticator that doesn't use a login form, such as OAuthenticator.

이 버전이 영향받나요?

사용 중인 패키지 버전을 입력하면 즉시 평가합니다.

영향 패키지

PyPI / jupyterhub

최초 영향 버전: 0 수정 버전: 5.5.0

수정 pip install --upgrade 'jupyterhub>=5.5.0'

참고

https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h [WEB]
https://nvd.nist.gov/vuln/detail/CVE-2026-54338 [ADVISORY]
https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a [WEB]
https://github.com/jupyterhub/jupyterhub [PACKAGE]