Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
jupyterhub-k8s-hub could allow unauthorized code execution
published 1 month ago
Summary
The jupyterhub-k8s-hub component used in your environment can be tricked into running code it should not run. This could let an attacker take control of the service or access data. Upgrade to the latest version of the package as soon as possible to close the gap.
What to do
- Update cleanstart jupyterhub-k8s-hub to version 4.3.2-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | jupyterhub-k8s-hub |
< 4.3.2-r2 Fix: upgrade to 4.3.2-r2
|
Original advisory text
Security fix for CVE-2026-33175 applied in: jupyterhub-k8s-hub 4.3.2-r2
Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-ZW90347 · OSV
Track software like this
Free during beta