Threats tagged 'brew-jupyterlab-cve-2026-6658'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-6658Jupyterlab: jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML Medium5.4EPSS 0.2%2026-11-09GCVE DatabaseCVE-2026-6658 Jupyterlab's nbconvert component versions up to 7.17.0 have a Cross-site Scripting (XSS) vulnerability due to unsanitized rendering of `text/vnd.mermaid` output in HTML exports. This allows injection of arbitrary HTML/JavaScript by breaking out of a <pre> tag in the exported HTML, potentially executing scripts in the context of users viewing the export. EPSS 0.2%Report on CVE-2026-6658 Vulnerability #brew-jupyterlab-cve-2026-6658 #homebrew	GCVE Database	2026-11-09

Page 1 of 1