[Git][security-tracker-team/security-tracker][master] Add new JupyterHub issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ca9e94e by Salvatore Bonaccorso at 2026-05-23T09:38:23+02:00
Add new JupyterHub issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -47,7 +47,9 @@ CVE-2026-41069 (libheif is a HEIF and AVIF file format decoder and encoder. In v
 	- libheif <unfixed>
 	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-p82x-fpmv-576r
 CVE-2026-40864 (JupyterHub is software that allows users to create a multi-user server ...)
-	TODO: check
+	- jupyterhub <unfixed>
+	NOTE: https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-m68r-v472-jgq9
+	NOTE: Fixed by: https://github.com/jupyterhub/jupyterhub/commit/9c5ec277d3cda5a59de2d8c8117efa77bd941127 (5.4.5)
 CVE-2026-40610 (BentoML is a Python library for building online serving systems optimi ...)
 	NOT-FOR-US: BentoML
 CVE-2026-40607 (Mantis Bug Tracker (MantisBT) is an open source issue tracker. In vers ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ca9e94e99138340a4ed54d4667d9bb78cd116d1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9ca9e94e99138340a4ed54d4667d9bb78cd116d1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260523/4b368db5/attachment.htm>