PyPI/jupyterhub CVE-2021-41247: low 3.5, EPSS 0.80%

incomplete JupyterHub logout with simultaneous JupyterLab sessions

Action: Upgrade jupyterhub to 1.5.0 or later.

pip install jupyterhub==1.5.0

Affected

Fixed versions

Sources

• osv: GHSA-cw7p-q79f-m2v7
• https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-cw7p-q79f-m2v7
• https://nvd.nist.gov/vuln/detail/CVE-2021-41247
• https://github.com/jupyterhub/jupyterhub/commit/5ac9e7f73a6e1020ffddc40321fc53336829fe27
• https://github.com/jupyterhub/jupyterhub
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyterhub/PYSEC-2021-386.yaml

CVE-2021-41247 · published 2021-11-08T18:02:37Z · modified 2026-07-08T06:28:53.199283056Z · JSON