nbconvert

PyPI · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exportsCVE-2026-6658 · GHSA-9754-6RHW-GJ3H	nbconvert Migration Toolkit for Applications 8/mta/mta-solution-server-rhel9	PyPIRed Hat	Medium	No fix reported	2026-11-06
nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidocCVE-2026-114140 · GHSA-PJVX-PRJX-H659	nbconvert Red Hat OpenShift AI (RHOAI)/rhoai/odh-feature-server-rhel9	PyPIRed Hat	High	Fix reported	2026-10-22
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment FilenamesCVE-2026-39377 · GHSA-4C99-QJ7H-P3VGVersion ranges need review.	nbconvert Migration Toolkit for Applications 8/mta/mta-solution-server-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image EmbeddingCVE-2026-39378 · GHSA-7JQV-FW35-GMX9Version ranges need review.	nbconvert Red Hat OpenShift AI (RHOAI)/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
nbconvert has an uncontrolled search path that leads to unauthorized code execution on WindowsCVE-2025-53000 · GHSA-XM59-RQC7-HHVFVersion ranges need review.	nbconvert	PyPI	High	Fix reported	2026-09-10
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit pathsCVE-2021-32862 · GHSA-9JMQ-RX5F-8JWQVersion ranges need review.	nbconvert	PyPI	Medium	Fix reported	2026-09-10