https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:50:25 +0000 https://cve.radiocsirt.org/vuln/cve-2020-26261 <p><strong>Affected:</strong> jupyterhub systemdspawner</p> <p>jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. This is patched in jupyterhub-systemdspawner v0.15</p> <p><strong>Affected:</strong> jupyterhub systemdspawner</p> <p>jupyterhub-systemdspawner enables JupyterHub to spawn single-user notebook servers using systemd. In jupyterhub-systemdspawner before version 0.15 user API tokens issued to single-user servers are specified in the environment of systemd units. These tokens are incorrectly accessible to all users. In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default. This is patched in jupyterhub-systemdspawner v0.15</p> https://cve.radiocsirt.org/vuln/cve-2020-26261 https://cve.radiocsirt.org/vuln/ghsa-cg54-gpgr-4rm6 <p><strong>Affected:</strong> PyPI: jupyterhub-systemdspawner</p> <p>### Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users.</p> <p>In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default.</p> <p>### Patches Patched in jupyterhub-systemdspawner v0.15</p> <p>### Workarounds No workaround other than upgrading systemdspawner to 0.15</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Open a thread in [the Jupyter forum](https://discourse.jupyter.org) * Email us at [security@ipython.org](mailto:security@ipython.org)</p> <p><strong>Affected:</strong> PyPI: jupyterhub-systemdspawner</p> <p>### Impact user API tokens issued to single-user servers are specified in the environment of systemd units, which are accessible to all users.</p> <p>In particular, the-littlest-jupyterhub is affected, which uses systemdspawner by default.</p> <p>### Patches Patched in jupyterhub-systemdspawner v0.15</p> <p>### Workarounds No workaround other than upgrading systemdspawner to 0.15</p> <p>### For more information</p> <p>If you have any questions or comments about this advisory: * Open a thread in [the Jupyter forum](https://discourse.jupyter.org) * Email us at [security@ipython.org](mailto:security@ipython.org)</p> https://cve.radiocsirt.org/vuln/ghsa-cg54-gpgr-4rm6