CVE-2026-44727 - Jupyter Server nbconvert handlers missing CSP sandbox enables stored XSS and token theft - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

GHSA-fcw5-x6j4-ccmp

By Daniel Danziger |

18 June 2026

CVE-2026-44727 – Jupyter Server nbconvert handlers missing CSP sandbox enables stored XSS and token theft

jupyter-server