Fedora 43 : python-jupyter-server (2026-275d2ecbbd)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-275d2ecbbd advisory. New version fixing high-severity CVE. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CVE-2026-44727

A flaw was found in Jupyter Server. The nbconvert HTTP handlers in Jupyter Server render user-authored notebook HTML without a sandbox directive in their Content-Security-Policy. This, combined with nbconvert.HTMLExporter's default non-sanitizing behavior, allows a notebook containing an HTML...

aiidalab-widgets-base (>=1.3.4, <=2.0.0a1), categorical-encoding (>=0.0.0, <=0.3.0) +33 more potentially affected by CVE-2026-44727 via jupyter-server (1.15.6)

jupyter-server PYPI version 1.15.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - aiidalab-widgets-base =1.3.4, =0.0.0, =0.0.1.post7, =0.1.2, =1.2.0, =1.3.1, =1.3.1, =1.3.1, =2.2.0, =1.3.1, =1.2.0, =0.0.0,...

chronix2grid (>=0.1.0rc1, <=1.0.2) potentially affected by CVE-2026-44727 via jupyter-server (0.2.1)

jupyter-server PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - chronix2grid =0.1.0rc1, =1.0.2 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-44727 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

e2xgrader (0.1.0.dev1) potentially affected by CVE-2026-44727 via jupyter-server (1.19.1)

jupyter-server PYPI version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - e2xgrader 0.1.0.dev1 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-44727 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-44727 Source advisory: OSV:PYSEC-2026-366...

CVE-2026-44727

Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default...

a2 (>=0.1.0, <=0.3.17), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=1.1.1rc4) +361 more potentially affected by CVE-2026-44727 via jupyter-server (>=0.0.5, <=2.17.0)

jupyter-server PYPI version =0.0.5, =0.1.0, =0.14.0.3rc1, =0.3.0, =0.1.0b0, =1.3.4, =0.18.3, =0.1.0, =1.0.1, =0.1.0, =1.0.1, =1.0.14 and more Source cves: CVE-2026-44727 Source advisory: MEND:CVE-2026-44727...

CVE-2026-44727 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

mrx-link (>=0.8.2, <=1.2.0), mrx-link-core (>=1.2.0.dev1, <=1.3.2.dev1) +1 more potentially affected by CVE-2026-44727 via jupyter-server (1.17.0)

jupyter-server PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - mrx-link =0.8.2, =1.2.0.dev1, =0.12.0.dev0, =1.0.2.dev1 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...

voila (>=0.0.11, <=0.1.7) potentially affected by CVE-2026-44727 via jupyter-server (0.0.5)

jupyter-server PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - voila =0.0.11, =0.1.7 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...

a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +101 more potentially affected by CVE-2026-44727 via jupyter-server (>=2.0.0rc3, <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-44727 Source advisory: SNYK:PYTHON-JUPYTERSERVER-17391532...

a2 (>=0.1.0, <=0.3.17), arcor2-calibration (0.8.0) +101 more potentially affected by CVE-2026-44727 via jupyter-server (>=2.0.0rc3, <=2.17.0)

jupyter-server PYPI version =2.0.0rc3, =0.1.0, =0.1.0, =1.0.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.3.5, =0.3.8 - controlman 0.0.0.dev340 - counterplots 0.0.9 and more Source cves: CVE-2026-44727 Source advisory: GHSA-FCW5-X6J4-CCMP...

e2xgrader (0.1.0.dev1) potentially affected by CVE-2026-44727 via jupyter-server (1.19.1)

jupyter-server PYPI version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - e2xgrader 0.1.0.dev1 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...

here-search-demo (>=0.8.0, <=0.8.5) potentially affected by CVE-2026-44727 via jupyter-server (1.23.3)

jupyter-server PYPI version 1.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - here-search-demo =0.8.0, =0.8.5 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...

xircuits (1.3.0) potentially affected by CVE-2026-44727 via jupyter-server (1.15.4)

jupyter-server PYPI version 1.15.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - xircuits 1.3.0 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...

jupyterlab-tabnine (>=0.0.1, <=0.0.19) potentially affected by CVE-2026-44727 via jupyter-server (1.6.4)

jupyter-server PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on jupyter-server and may be impacted: - jupyterlab-tabnine =0.0.1, =0.0.19 Source cves: CVE-2026-44727 Source advisory: OSV:GHSA-FCW5-X6J4-CCMP...