CVE-2026-44727

MediumCVSS 5.4/10Last modified Oct 25, 2026

Description

Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a notebook carrying an HTML payload in a display_data output triggers stored XSS with cookie access, full /api/* authority, and kernel RCE. This vulnerability is fixed in 2.20.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79 CWE-1021

Affected software

Vendor	Product	Versions
jupyter-server	jupyter_server	< 2.20
Red Hat	Red Hat Migration Toolkit for Applications 8.2	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI 3.4	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—

References

Timeline

Published: Jun 22, 2026
Last modified: Oct 25, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-447287.8Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code tha CVE-2026-447298.7Twenty is an open source CRM. In 1.18.0 and earlier, the file serving endpoints in Twenty CRM at /files/* and /file/:fileFolder/:id serve up CVE-2026-44739.8A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /a CVE-2026-447307.2OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin c CVE-2026-447314.3OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the web application's meetings filter feature CVE-2026-447324.3OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, OpenProject exposes a document update endpoin CVE-2026-447335.9OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, Business Logic Error on OpenProject through P CVE-2026-447346.5OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, a Missing Authorization vulnerability exists CVE-2026-447356.5OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares endpoint returns share CVE-2026-447366.5OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint allows any authentica CVE-2026-447376.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create CVE-2026-447387.7Grav is a file-based Web platform. Prior to 2.0.0-rc.2, the Twig sandbox allow-list permits any user with the admin.pages role to call confi