Filtered by vendor Jupyterhub Subscriptions
Filtered by product Systemdspawner Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-26261 1 Jupyterhub 1 Systemdspawner 2020-12-10 7.9 High
jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. This is patched in jupyterhub-systemdspawner v0.15