Skip to content

[GHSA-37w4-hwhx-4rc4] JupyterHub has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request#7593

Open
krassowski wants to merge 1 commit intokrassowski/advisory-improvement-7593from
krassowski-GHSA-37w4-hwhx-4rc4
Open

[GHSA-37w4-hwhx-4rc4] JupyterHub has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request#7593
krassowski wants to merge 1 commit intokrassowski/advisory-improvement-7593from
krassowski-GHSA-37w4-hwhx-4rc4

Commits

Commits on May 6, 2026