CVE-2026-44727 - Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
CVE ID :CVE-2026-44727 Published : June 22, 2026, 7:56 p.m. | 5 hours, 13 minutes ago Description :Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a...