Collaboration to mitigate issues of security advisory in oauthenticator

I’m creating this as a placeholder post where we can channel discussion on how to mitigate the issues following Base class whitelist configuration ignored - any authenticated user get access · Advisory · jupyterhub/oauthenticator · GitHub.