CVE-2026-54338

5.3 Moyenne

Publiée le 07/08/2026 à 23:17 · Modifiée le 09/09/2026 à 22:58 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and storage resources. This issue is fixed in version 5.5.0.

Traduire en français

Produits concernés

jupyterhub

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L`

Faiblesses (CWE)

CWE-400

Références

https://github.com/jupyterhub/jupyterhub/commit/d6dc595f84b7509969686da31d87d6d69e7fce0a
https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-p43p-whwx-q52h

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories