OA
Product
oauthenticator
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add oauthenticator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29033 | 9.1 | Mar 20 | GoogleOAuthenticator.hosted_domain incorrectly verifies membership of an Google organization/workspace Affected: < 16.3.0 |
| CVE-2026-33175 | 8.8 | Apr 3 | OAuthenticator: Authentication Bypass in Auth0OAuthenticator via Unverified Email Claims Affected: < 17.4.0 |
| CVE-2024-37300 | 8.1 | Jun 12 | Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0 Affected: < 16.3.1 |
Showing 3