{"action":"Upgrade jupyter-scheduler to 1.1.6 or later.","affected":[{"fixed":"1.1.6","introduced":"1.0.0"},{"fixed":"1.2.1","introduced":"1.2.0"},{"fixed":"1.8.2","introduced":"1.3.0"},{"fixed":"2.5.2","introduced":"2.0.0"}],"component":"jupyter-scheduler","cve_ids":["CVE-2024-28188"],"ecosystem":"PyPI","epss":0.00331,"exploited":false,"fixed_versions":["1.1.6","1.2.1","1.8.2","2.5.2"],"ghsa_id":"GHSA-v9g2-g7j4-4jxc","id":"tcs_01M5KGSVJ69TJDV63T5C7J3VDP","modified_at":"2026-07-07T17:46:13.960340678Z","published_at":"2026-07-07T11:45:43.373639Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1479","https://github.com/jupyter-server/jupyter-scheduler/security/advisories/GHSA-v9g2-g7j4-4jxc","https://nvd.nist.gov/vuln/detail/CVE-2024-28188","https://github.com/jupyter-server/jupyter_server/pull/1392","https://github.com/jupyter-server/jupyter-scheduler/commit/06435a2277bb2b8f441ec9cedafa474572b92c5d","https://github.com/jupyter-server/jupyter-scheduler/commit/a621b386397280cc8ee5a208dca4607cb71cdd65","https://github.com/jupyter-server/jupyter-scheduler/commit/d428ac871909444e175ba421bf8ab4980d6ebf9f","https://github.com/jupyter-server/jupyter-scheduler/commit/f4137a779fdf0cc4a9688a42dd8c6e7ade60f044","https://github.com/jupyter-server/jupyter-scheduler","https://pypi.org/project/jupyter-scheduler","https://github.com/advisories/GHSA-v9g2-g7j4-4jxc"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-1479","url":"https://osv.dev/vulnerability/PYSEC-2026-1479"}],"summary":"jupyter-scheduler's endpoint is missing authentication"}