{"action":"Upgrade binderhub to 0.2.0-n653 or later.","affected":[{"fixed":"0.2.0-n653","introduced":"0"}],"component":"binderhub","cve_ids":["CVE-2021-39159"],"ecosystem":"PyPI","epss":0.01928,"exploited":false,"fixed_versions":["0.2.0-n653"],"ghsa_id":"GHSA-9jjr-qqfp-ppwx","id":"tcs_01M5KGCMXZZ6TZ3N1AZ6855F9B","modified_at":"2026-02-22T22:56:11.676684Z","published_at":"2021-08-25T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-371","https://github.com/jupyterhub/binderhub/security/advisories/GHSA-9jjr-qqfp-ppwx","https://github.com/jupyterhub/binderhub/commit/195caac172690456dcdc8cc7a6ca50e05abf8182.patch"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-371","url":"https://osv.dev/vulnerability/PYSEC-2021-371"}],"summary":"BinderHub is a kubernetes-based cloud service that allows users to share reproducible interactive computing environments from code repositories. In affected versions a remote code execution vulnerabil"}