PyPI/binderhub CVE-2021-39159: unknown, EPSS 1.93%
BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerabil
Action: Upgrade binderhub to 0.2.0-n653 or later.
pip install binderhub==0.2.0-n653Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0-n653 | - |
Fixed versions
| 0.2.0-n653 |
Sources
- osv: PYSEC-2021-371
- https://github.com/jupyterhub/binderhub/security/advisories/GHSA-9jjr-qqfp-ppwx
- https://github.com/jupyterhub/binderhub/commit/195caac172690456dcdc8cc7a6ca50e05abf8182.patch
CVE-2021-39159 · published · modified · JSON