CVE-2024-28188
2 advisories.
PyPI/jupyter-scheduler CVE-2024-28188: medium 5.3
jupyter-scheduler's endpoint is missing authentication
Action: Upgrade jupyter-scheduler to 1.1.6 or later.
pip install jupyter-scheduler==1.1.6pip install jupyter-scheduler==1.2.1pip install jupyter-scheduler==1.8.2pip install jupyter-scheduler==2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.1.6 | - |
| 1.2.0 | 1.2.1 | - |
| 1.3.0 | 1.8.2 | - |
| 2.0.0 | 2.5.2 | - |
Fixed versions
| 1.1.6 | 1.2.1 | 1.8.2 | 2.5.2 |
Sources
- osv: GHSA-v9g2-g7j4-4jxc
- https://github.com/jupyter-server/jupyter-scheduler/security/advisories/GHSA-v9g2-g7j4-4jxc
- https://nvd.nist.gov/vuln/detail/CVE-2024-28188
- https://github.com/jupyter-server/jupyter_server/pull/1392
- https://github.com/jupyter-server/jupyter-scheduler/commit/06435a2277bb2b8f441ec9cedafa474572b92c5d
- https://github.com/jupyter-server/jupyter-scheduler/commit/a621b386397280cc8ee5a208dca4607cb71cdd65
- https://github.com/jupyter-server/jupyter-scheduler/commit/d428ac871909444e175ba421bf8ab4980d6ebf9f
- https://github.com/jupyter-server/jupyter-scheduler/commit/f4137a779fdf0cc4a9688a42dd8c6e7ade60f044
- https://github.com/jupyter-server/jupyter-scheduler
CVE-2024-28188 · published · modified · JSON
PyPI/jupyter-scheduler CVE-2024-28188: medium 5.3
jupyter-scheduler's endpoint is missing authentication
Action: Upgrade jupyter-scheduler to 1.1.6 or later.
pip install jupyter-scheduler==1.1.6pip install jupyter-scheduler==1.2.1pip install jupyter-scheduler==1.8.2pip install jupyter-scheduler==2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.1.6 | - |
| 1.2.0 | 1.2.1 | - |
| 1.3.0 | 1.8.2 | - |
| 2.0.0 | 2.5.2 | - |
Fixed versions
| 1.1.6 | 1.2.1 | 1.8.2 | 2.5.2 |
Sources
- osv: PYSEC-2026-1479
- https://github.com/jupyter-server/jupyter-scheduler/security/advisories/GHSA-v9g2-g7j4-4jxc
- https://nvd.nist.gov/vuln/detail/CVE-2024-28188
- https://github.com/jupyter-server/jupyter_server/pull/1392
- https://github.com/jupyter-server/jupyter-scheduler/commit/06435a2277bb2b8f441ec9cedafa474572b92c5d
- https://github.com/jupyter-server/jupyter-scheduler/commit/a621b386397280cc8ee5a208dca4607cb71cdd65
- https://github.com/jupyter-server/jupyter-scheduler/commit/d428ac871909444e175ba421bf8ab4980d6ebf9f
- https://github.com/jupyter-server/jupyter-scheduler/commit/f4137a779fdf0cc4a9688a42dd8c6e7ade60f044
- https://github.com/jupyter-server/jupyter-scheduler
- https://pypi.org/project/jupyter-scheduler
- https://github.com/advisories/GHSA-v9g2-g7j4-4jxc
CVE-2024-28188 · published · modified · JSON