{"action":"Upgrade jupyterhub-firstuseauthenticator to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"jupyterhub-firstuseauthenticator","cve_ids":["CVE-2021-41194"],"ecosystem":"PyPI","epss":0.01367,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-5xvc-vgmp-jgc3","id":"tcs_01M5KF22BDCR60038CCZ6Z07YE","modified_at":"2026-07-08T06:28:40.246890047Z","published_at":"2021-10-28T23:13:57Z","references":["https://osv.dev/vulnerability/GHSA-5xvc-vgmp-jgc3","https://github.com/jupyterhub/firstuseauthenticator/security/advisories/GHSA-5xvc-vgmp-jgc3","https://nvd.nist.gov/vuln/detail/CVE-2021-41194","https://github.com/jupyterhub/firstuseauthenticator/pull/38","https://github.com/jupyterhub/firstuseauthenticator/pull/38.patch","https://github.com/jupyterhub/firstuseauthenticator/pull/38/commits/32b21898fb2b53b1a2e36270de6854ad70e9e9bf","https://github.com/jupyterhub/firstuseauthenticator/pull/38/commits/9e200d974e0cb85d828a6afedb8ab90a37878f28","https://github.com/jupyterhub/firstuseauthenticator/commit/953418e2450dbc2d854e332350849533b0ebc7ba","https://github.com/jupyterhub/firstuseauthenticator","https://github.com/pypa/advisory-database/tree/main/vulns/jupyterhub-firstuseauthenticator/PYSEC-2021-384.yaml"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-5xvc-vgmp-jgc3","url":"https://osv.dev/vulnerability/GHSA-5xvc-vgmp-jgc3"}],"summary":"Improper Access Control in jupyterhub-firstuseauthenticator"}