Vulnerabilities

TI-2026-28364 CVE-2026-39378 · GHSA-7jqv-fw35-gmx9

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

LOW 29

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00306 Published 2026-04-21 Partial fix · 7.17.1 CWE-22

TI-2026-28363 CVE-2026-39377 · GHSA-4c99-qj7h-p3vg

LOW 28

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00266 Published 2026-04-21 Partial fix · 7.17.1 CWE-22

TI-2025-33005 CVE-2025-53000 · GHSA-xm59-rqc7-hhvf

HIGH 72

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0026 Published 2025-12-17 Fixed in 7.17.0 CWE-427

TI-2021-12526 CVE-2021-32862 · GHSA-9jmq-rx5f-8jwq

LOW 36

The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0152 Published 2022-08-18 Fixed in 6.5.1 CWE-79