CVE-2021-39159
2 advisories.
PyPI/binderhub CVE-2021-39159: critical 9.6, EPSS 1.93%
remote code execution via git repo provider
Action: Upgrade binderhub to 0.2.0 or later.
pip install binderhub==0.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0 | - |
Fixed versions
| 0.2.0 |
Sources
- osv: GHSA-9jjr-qqfp-ppwx
- https://github.com/jupyterhub/binderhub/security/advisories/GHSA-9jjr-qqfp-ppwx
- https://nvd.nist.gov/vuln/detail/CVE-2021-39159
- https://github.com/jupyterhub/binderhub/commit/195caac172690456dcdc8cc7a6ca50e05abf8182
- https://github.com/jupyterhub/binderhub/commit/195caac172690456dcdc8cc7a6ca50e05abf8182.patch
- https://github.com/jupyterhub/binderhub
- https://github.com/pypa/advisory-database/tree/main/vulns/binderhub/PYSEC-2021-371.yaml
CVE-2021-39159 · published · modified · JSON
PyPI/binderhub CVE-2021-39159: unknown, EPSS 1.93%
BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerabil
Action: Upgrade binderhub to 0.2.0-n653 or later.
pip install binderhub==0.2.0-n653Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.0-n653 | - |
Fixed versions
| 0.2.0-n653 |
Sources
- osv: PYSEC-2021-371
- https://github.com/jupyterhub/binderhub/security/advisories/GHSA-9jjr-qqfp-ppwx
- https://github.com/jupyterhub/binderhub/commit/195caac172690456dcdc8cc7a6ca50e05abf8182.patch
CVE-2021-39159 · published · modified · JSON