All products

oauthenticator

PyPI · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Auth0OAuthenticator has an Authentication Bypass via Unverified Email ClaimsCVE-2026-33175 · GHSA-RRVG-CXH4-QHRVVersion ranges need review. oauthenticator PyPI High Fix reported
Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0CVE-2024-37300 · GHSA-GPRJ-3P75-F996Version ranges need review. oauthenticator PyPI High Fix reported
GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspaceCVE-2024-29033 · GHSA-55M3-44XF-HG4HVersion ranges need review. oauthenticator PyPI High Fix reported
Base class whitelist configuration ignored in OAuthenticatorCVE-2020-26250 · GHSA-384W-5V3F-Q499Version ranges need review. oauthenticator PyPI High Fix reported
JupyterHub OAuthenticator elevation of privilegeCVE-2018-7206 · GHSA-8X3M-M3X9-54FJVersion ranges need review. oauthenticator PyPI High Fix reported
Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticatorCVE-2022-31027 · GHSA-R7V4-JWX9-WX43Version ranges need review. oauthenticator PyPI Medium Fix reported