ByteOS Network

NVD Vulnerability Details :

CVE-2026-6658

Deferred

Source-security@huntr.dev

Published At-26 Jun, 2026 | 10:16

Updated At-26 Jun, 2026 | 20:08

A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `data_mermaid` block in `share/templates/lab/base.html.j2` renders `text/vnd.mermaid` cell output directly into HTML without escaping, enabling attackers to inject arbitrary HTML/JavaScript by breaking out of the `<pre>` tag. This vulnerability impacts any server using nbconvert to render notebooks as HTML, allowing attackers to execute arbitrary JavaScript in the context of users viewing the HTML export.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.0	5.4	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
			N/A

Type: Secondary

Version: 3.0

Base score: 5.4

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

Weaknesses

CWE ID	Type	Source
CWE-79	Secondary	security@huntr.dev

CWE ID: CWE-79

Type: Secondary

Source: security@huntr.dev

References

Hyperlink	Source	Resource
https://huntr.com/bounties/47570290-3b26-4477-8cfa-fdef7db5aefe	security@huntr.dev	N/A
https://huntr.com/bounties/47570290-3b26-4477-8cfa-fdef7db5aefe	134c704f-9b21-4f2e-91b3-4a467353bcc0	N/A

Hyperlink: https://huntr.com/bounties/47570290-3b26-4477-8cfa-fdef7db5aefe

Source: security@huntr.dev

Resource: N/A

Hyperlink: https://huntr.com/bounties/47570290-3b26-4477-8cfa-fdef7db5aefe

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History