9.3
Critical
CVE-2026-44727 Jupyter Server is the backend for Jupyter web applications
Description
Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a notebook carrying an HTML payload in a display_data output triggers stored XSS with cookie access, full /api/* authority, and kernel RCE. This vulnerability is fixed in 2.20.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jupyter_server 2.20 | earliest → < 2.20 | 2.20 |
| Migration Toolkit for Applications 8 | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat Migration Toolkit for Applications 8.2 1784109883 | earliest → < 1784109883 | 1784109883 |
| Red Hat OpenShift AI 3.4 1787073593 | earliest → < 1787073593 | 1787073593 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of jupyter_server
The 14 CVEs of jupyter_server →
CVE-2026-114135
Jupyter Server is the backend for Jupyter web applications
8.8
High
CVE-2026-86049
Jupyter Server is the backend for Jupyter web applications
7.1
High
CVE-2026-40934
Jupyter Server is the backend for Jupyter web applications
7.6
High
CVE-2026-40110
Jupyter Server is the backend for Jupyter web applications
7.6
High