PyPI/nebari CVE-2024-34529: unknown, EPSS 0.35%

Nebari through 2024.4.1 prints the temporary Keycloak root password.

Action: Upgrade nebari to 2024.6.1rc2 or later.

pip install nebari==2024.6.1rc2

Affected

Fixed versions

Sources

• osv: PYSEC-2024-185
• https://github.com/nebari-dev/nebari/issues/2282
• https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71
• https://github.com/advisories/GHSA-vjc4-3vgx-pq9h

CVE-2024-34529 · published 2024-05-06T00:15:10Z · modified 2026-06-10T17:02:23.539340901Z · JSON