Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Critical severity
GitHub Reviewed
Published
Jun 17, 2026
in
jupyter-server/jupyter_server
•
Updated Aug 28, 2026
Give feedback on Dependabot alerts