{"action":"Upgrade jupyterhub-firstuseauthenticator to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"jupyterhub-firstuseauthenticator","cve_ids":["CVE-2021-41194"],"ecosystem":"PyPI","epss":0.01367,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-5xvc-vgmp-jgc3","id":"tcs_01M5KGCQJD92HE1SM1H39G4CZ2","modified_at":"2023-11-08T04:06:54.528947Z","published_at":"2021-10-28T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-384","https://github.com/jupyterhub/firstuseauthenticator/pull/38.patch","https://github.com/jupyterhub/firstuseauthenticator/security/advisories/GHSA-5xvc-vgmp-jgc3","https://github.com/jupyterhub/firstuseauthenticator/pull/38"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-384","url":"https://osv.dev/vulnerability/PYSEC-2021-384"}],"summary":"FirstUseAuthenticator is a JupyterHub authenticator that helps new users set their password on their first login to JupyterHub. When JupyterHub is used with FirstUseAuthenticator, a vulnerability in v"}