{"action":"Upgrade oauthenticator to 15.0.0 or later.","affected":[{"fixed":"15.0.0","introduced":"0"}],"component":"oauthenticator","cve_ids":["CVE-2022-31027"],"ecosystem":"PyPI","epss":0.00475,"exploited":false,"fixed_versions":["15.0.0"],"ghsa_id":"GHSA-r7v4-jwx9-wx43","id":"tcs_01M5KFXG6RDWS4VTSYBZB12504","modified_at":"2023-11-08T04:09:23.149049Z","published_at":"2022-06-06T21:21:40Z","references":["https://osv.dev/vulnerability/GHSA-r7v4-jwx9-wx43","https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-r7v4-jwx9-wx43","https://nvd.nist.gov/vuln/detail/CVE-2022-31027","https://github.com/jupyterhub/oauthenticator/commit/5cd2d1816f90dc5c946e6e38fd2d0ba535624c5c","https://github.com/jupyterhub/oauthenticator","https://github.com/pypa/advisory-database/tree/main/vulns/oauthenticator/PYSEC-2022-206.yaml"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-r7v4-jwx9-wx43","url":"https://osv.dev/vulnerability/GHSA-r7v4-jwx9-wx43"}],"summary":"Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator"}