LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)

中 5.9CVE-2026-34052 · GHSA-8mxq-7xr7-2fxj · PYSEC-2026-2533 · 03/04/2026 公開 · 24/07/2026 更新

要点

CVE-2026-34052 は jupyterhub-ltiauthenticator, lti jupyterhub authenticator (jupyter) に影響する深刻度「中」 (CVSS 5.9) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.34%（全脆弱性の 27.7% より高い）。
対処：1.6.3 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
jupyterhub-ltiauthenticator PyPI	`< 1.6.3`	`1.6.3`
lti jupyterhub authenticator jupyter	`< 1.6.3`	`1.6.3`

概要

Summary

The LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a denial of service.

Patches

upgrade jupyterhub-litauthenticator to 1.6.3

NVD の説明

LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a denial of service. This issue has been patched in version 1.6.3.