MEDIUM6.5PyPI
GHSA-4c99-qj7h-p3vg· CVE-2026-39377, PYSEC-2026-2229nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Modified: 9/10/2026
package
PyPI/nbconvert
pkg:pypi/nbconvert
MEDIUM6.5PyPI
GHSA-7jqv-fw35-gmx9· CVE-2026-39378, PYSEC-2026-2230nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Modified: 9/10/2026
MEDIUM5.4PyPI
GHSA-9jmq-rx5f-8jwq· CVE-2021-32862, GHSA-h274-fcvj-h2wmnbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Modified: 9/10/2026
HIGHPyPI
GHSA-xm59-rqc7-hhvf· CVE-2025-53000, PYSEC-2026-1691nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Modified: 9/10/2026
—PyPI
PYSEC-2022-249· CVE-2021-32862, GHSA-9jmq-rx5f-8jwqModified: 11/8/2023
—PyPI
PYSEC-2026-1691· CVE-2025-53000, GHSA-xm59-rqc7-hhvfnbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-2229· CVE-2026-39377, GHSA-4c99-qj7h-p3vgModified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2230· CVE-2026-39378, GHSA-7jqv-fw35-gmx9Modified: 7/13/2026