jupyter/nbconvert Security Advisories | GitStock

high2026-10-22

nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc

GHSA-pjvx-prjx-h659 · CVE-2026-114140

medium2026-04-21

nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

GHSA-7jqv-fw35-gmx9 · CVE-2026-39378

medium2026-04-21

nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

GHSA-4c99-qj7h-p3vg · CVE-2026-39377

high2025-12-18

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

GHSA-xm59-rqc7-hhvf · CVE-2025-53000

medium2022-08-10

nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

GHSA-9jmq-rx5f-8jwq · CVE-2021-32862