{"action":"Upgrade oauthenticator to 15.0.0 or later.","affected":[{"fixed":"15.0.0","introduced":"0"}],"component":"oauthenticator","cve_ids":["CVE-2022-31027"],"ecosystem":"PyPI","epss":0.00468,"exploited":false,"fixed_versions":["15.0.0"],"ghsa_id":"GHSA-r7v4-jwx9-wx43","id":"tcs_01M5KGGH0EC6TTKYKSH32YN765","modified_at":"2023-11-08T04:09:23.149049Z","published_at":"2022-06-09T13:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-206","https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-r7v4-jwx9-wx43"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-206","url":"https://osv.dev/vulnerability/PYSEC-2022-206"}],"summary":"OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is pr"}