PyPI/jupyter-server-proxy CVE-2022-21697: medium 6.3, EPSS 1.10%

SSRF vulnerability in jupyter-server-proxy

Action: Upgrade jupyter-server-proxy to 3.2.1 or later.

pip install jupyter-server-proxy==3.2.1

Affected

Fixed versions

Sources

• osv: GHSA-gcv9-6737-pjqw
• https://github.com/jupyterhub/jupyter-server-proxy/security/advisories/GHSA-gcv9-6737-pjqw
• https://nvd.nist.gov/vuln/detail/CVE-2022-21697
• https://github.com/jupyterhub/jupyter-server-proxy/commit/fd31930bacd12188c448c886e0783529436b99eb
• https://github.com/jupyterhub/jupyter-server-proxy
• https://github.com/jupyterhub/jupyter-server-proxy/compare/v3.2.0...v3.2.1.patch
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server-proxy/PYSEC-2022-16.yaml

CVE-2022-21697 · published 2022-01-27T16:24:26Z · modified 2024-09-24T18:48:55.880796Z · JSON