[GHSA-37w4-hwhx-4rc4] JupyterHub has an Extension Manager API/GUI Policy Discrepancy, allowing 3rd party (malicious) extensions install via POST request #7056
Triggered via pull request
May 6, 2026 08:36
krassowski
krassowski
edited
#7593
Status
Success
Total duration
1m 9s
Artifacts
–
create_staging_branch.yaml
on: pull_request_target
ensure-base-is-staging
1m 3s