Approved changes feed: RSS · Atom

cpe:2.3:a:jupyterhub:kubespawner:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJupyterhub (b9fc67de-411f-5996-aa79-a32cff5a7e29)
ProductKubespawner (684e401b-ea4d-504b-b714-003c62f29a61)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jupyterhub/kubespawner purl2cpe 2026-06-01 10:18:07.322145
pkg:pypi/jupyterhub-kubespawner purl2cpe 2026-06-01 10:18:07.322148

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-15110 vulnerable 2026-06-08 05:19:25.296590 Possible pod name collisions in jupyterhub-kubespawner
MEDIUM (6.8)
In jupyterhub-kubespawner before 0.12, certain usernames will be able to craft particular server names which will grant them access to the default server of other users who have matching usernames. This has been fixed in 0.12.
Published: 2020-07-17T20:45:13.000Z
Updated: 2024-08-04T13:08:22.300Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.