Skip to content
OpenAdvisories

Package · Ubuntu

nbconvert

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-114140 Public exploit

    nbconvert: File write via path traversal in cell output filenames

    The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata f…

    jupyter nbconvert kubeflow-pipelines-visualization-server nbconvert Debian Ubuntu Wolfi PyPI
  • High 8.5
    CVE-2025-53000

    nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

    The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF resu…

    jupyter nbconvert jupyter-docker-base jupyter-docker-stacks Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2021-32862

    nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths

    The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-sit…

    jupyter nbconvert kubeflow-pipelines-visualization-server nbconvert Debian Ubuntu Wolfi PyPI