Nixpkgs security tracker

Login with GitHub

⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

All statuses

Filter by:

With package: python312Packages.jupyterhub

Found 1 matching suggestions

View:

Compact

Detailed

Untriaged

Permalink CVE-2026-33709

created 1 week, 4 days ago

JupyterHub has an Open Redirect Vulnerability

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to version 5.4.4, an open redirect vulnerability in JupyterHub allows attackers to construct links which, when clicked, take users to the JupyterHub login page, after which they are sent to an arbitrary attacker-controlled site outside JupyterHub instead of a JupyterHub page, bypassing JupyterHub's check to prevent this. This issue has been patched in version 5.4.4.

References

https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-3vff-hjqv-m7h8 x_refsource_CONFIRM
https://github.com/jupyterhub/jupyterhub/releases/tag/5.4.4 x_refsource_MISC

Affected products

jupyterhub

==< 5.4.4

Matching in nixpkgs

pkgs.python312Packages.jupyterhub

Serves multiple Jupyter notebook instances

nixos-25.11 5.4.2
- nixos-25.11-small 5.4.2
- nixpkgs-25.11-darwin 5.4.2

pkgs.python313Packages.jupyterhub

Serves multiple Jupyter notebook instances

nixos-unstable 5.4.4
- nixpkgs-unstable 5.4.4
- nixos-unstable-small 5.4.4
nixos-25.11 5.4.2
- nixos-25.11-small 5.4.2
- nixpkgs-25.11-darwin 5.4.2

pkgs.python314Packages.jupyterhub

Serves multiple Jupyter notebook instances

nixos-unstable 5.4.4
- nixpkgs-unstable 5.4.4
- nixos-unstable-small 5.4.4

pkgs.python312Packages.jupyterhub-systemdspawner

JupyterHub Spawner using systemd for resource isolation

nixos-25.11 1.0.2
- nixos-25.11-small 1.0.2
- nixpkgs-25.11-darwin 1.0.2

pkgs.python313Packages.jupyterhub-systemdspawner

JupyterHub Spawner using systemd for resource isolation

nixos-unstable 1.0.2
- nixpkgs-unstable 1.0.2
- nixos-unstable-small 1.0.2
nixos-25.11 1.0.2
- nixos-25.11-small 1.0.2
- nixpkgs-25.11-darwin 1.0.2

pkgs.python314Packages.jupyterhub-systemdspawner

JupyterHub Spawner using systemd for resource isolation

nixos-unstable 1.0.2
- nixpkgs-unstable 1.0.2
- nixos-unstable-small 1.0.2

pkgs.python312Packages.jupyterhub-tmpauthenticator

Simple Jupyterhub authenticator that allows anyone to log in

nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.python313Packages.jupyterhub-tmpauthenticator

Simple Jupyterhub authenticator that allows anyone to log in

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0
nixos-25.11 1.0.0
- nixos-25.11-small 1.0.0
- nixpkgs-25.11-darwin 1.0.0

pkgs.python314Packages.jupyterhub-tmpauthenticator

Simple Jupyterhub authenticator that allows anyone to log in

nixos-unstable 1.0.0
- nixpkgs-unstable 1.0.0
- nixos-unstable-small 1.0.0

pkgs.python312Packages.jupyterhub-ldapauthenticator

Simple LDAP Authenticator Plugin for JupyterHub

nixos-25.11 2.0.2
- nixos-25.11-small 2.0.2
- nixpkgs-25.11-darwin 2.0.2

pkgs.python313Packages.jupyterhub-ldapauthenticator

Simple LDAP Authenticator Plugin for JupyterHub

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2
nixos-25.11 2.0.2
- nixos-25.11-small 2.0.2
- nixpkgs-25.11-darwin 2.0.2

pkgs.python314Packages.jupyterhub-ldapauthenticator

Simple LDAP Authenticator Plugin for JupyterHub

nixos-unstable 2.0.2
- nixpkgs-unstable 2.0.2
- nixos-unstable-small 2.0.2

Package maintainers

@natsukium Tomoya Otabi <nixpkgs@natsukium.com>
@GaetanLepage Gaetan Lepage <gaetan@glepage.com>
@thomasjm Tom McLaughlin <tom@codedown.io>
@chiroptical Barry Moore II <chiroptical@gmail.com>

1