# \[ANN\] Critical security fix when using GlobusOAuthenticator with JupyterHub 5.0 in some configurations

**URL:** <https://discourse.jupyter.org/t/ann-critical-security-fix-when-using-globusoauthenticator-with-jupyterhub-5-0-in-some-configurations/26264>\
**Category:** JupyterHub\
**Tags:** announcement\
**Created:** [June 11, 2024, 11:23pm UTC](https://discourse.jupyter.org/t/ann-critical-security-fix-when-using-globusoauthenticator-with-jupyterhub-5-0-in-some-configurations/26264 "2024-06-11T23:23:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![yuvipanda](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.jupyter.org/yuvipanda/32/17_2.png) [@yuvipanda](https://discourse.jupyter.org/u/yuvipanda)\
**Post date:** [June 11, 2024, 11:23pm UTC](https://discourse.jupyter.org/t/ann-critical-security-fix-when-using-globusoauthenticator-with-jupyterhub-5-0-in-some-configurations/26264/1 "2024-06-11T23:23:34Z")

</div>

There’s a critical security fix that applies to you if you’re using GlobusOAuthenticator in a particular configuration with the newly released JupyterHub 5.0.

See more details in [the advisory](https://github.com/jupyterhub/oauthenticator/security/advisories/GHSA-gprj-3p75-f996).

If you’re affected, it is recommended to upgrade to the latest version of the `oauthenticator` package ASAP.
