5.3
Medium
CVE-2024-28188 Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule
Description
Jupyter Scheduler is collection of extensions for programming jobs to run now or run on a schedule. The list of conda environments of `jupyter-scheduler` users maybe be exposed, potentially revealing information about projects that a specific user may be working on. This vulnerability has been patched in version(s) 1.1.6, 1.2.1, 1.8.2 and 2.5.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jupyter-scheduler 2.0 | 2.0.0 → 2.5.1 | No fix stated |
| jupyter-scheduler 1.3 | 1.3.0 → 1.8.1 | No fix stated |
| jupyter-scheduler | 1.2.0 | No fix stated |
| jupyter-scheduler 1.0 | 1.0.0 → 1.1.5 | No fix stated |
| scheduler 2.0 | 2.0.0 → 2.5.1 | No fix stated |
| scheduler 1.3 | 1.3.0 → 1.8.1 | No fix stated |
| scheduler | 1.2.0 | No fix stated |
| scheduler 1.0 | 1.0.0 → 1.1.5 | No fix stated |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified