CVE-2024-34529
2 advisories.
PyPI/nebari CVE-2024-34529: medium 4.8, EPSS 0.35%
Nebari prints temporary Keycloak root password
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2024.4.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vjc4-3vgx-pq9h
- https://nvd.nist.gov/vuln/detail/CVE-2024-34529
- https://github.com/nebari-dev/nebari/issues/2282
- https://github.com/nebari-dev/nebari
- https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71
CVE-2024-34529 · published · modified · JSON
PyPI/nebari CVE-2024-34529: unknown, EPSS 0.35%
Nebari through 2024.4.1 prints the temporary Keycloak root password.
Action: Upgrade nebari to 2024.6.1rc2 or later.
pip install nebari==2024.6.1rc2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2024.6.1rc2 | - |
Fixed versions
| 2024.6.1rc2 |
Sources
- osv: PYSEC-2024-185
- https://github.com/nebari-dev/nebari/issues/2282
- https://github.com/nebari-dev/nebari/blob/5463e8df9e8d53a266a7b9d3d4e27353ec43c40b/src/_nebari/deploy.py#L71
- https://github.com/advisories/GHSA-vjc4-3vgx-pq9h
CVE-2024-34529 · published · modified · JSON