{"action":"Upgrade jupyterhub-systemdspawner to 0.15.0 or later.","affected":[{"fixed":"0.15.0","introduced":"0"}],"component":"jupyterhub-systemdspawner","cve_ids":["CVE-2020-26261"],"ecosystem":"PyPI","epss":0.0048,"exploited":false,"fixed_versions":["0.15.0"],"ghsa_id":"GHSA-cg54-gpgr-4rm6","id":"tcs_01M5KGAQN2E88GHQ38T77ASRAD","modified_at":"2023-11-08T04:03:16.807176Z","published_at":"2020-12-09T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-52","https://github.com/jupyterhub/systemdspawner/security/advisories/GHSA-cg54-gpgr-4rm6","https://github.com/jupyterhub/systemdspawner/commit/a4d08fd2ade1cfd0ef2c29dc221e649345f23580","https://pypi.org/project/jupyterhub-systemdspawner/","https://github.com/jupyterhub/systemdspawner/blob/master/CHANGELOG.md#v015"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-52","url":"https://osv.dev/vulnerability/PYSEC-2020-52"}],"summary":"jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are spe"}