Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1691
  • PyPI/nbconvert
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows 07 Jul
  • Fix available
  • Severity - 8.5 (High)
GHSA-7jqv-fw35-gmx9
  • PyPI/nbconvert
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding 21 Apr
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-4c99-qj7h-p3vg
  • PyPI/nbconvert
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames 21 Apr
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2230
  • PyPI/nbconvert
See record for full details 21 Apr
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-2229
  • PyPI/nbconvert
See record for full details 21 Apr
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-xm59-rqc7-hhvf
  • PyPI/nbconvert
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows 18 Dec 2025
  • Fix available
  • Severity - 8.5 (High)
PYSEC-2022-249
  • PyPI/nbconvert
See record for full details 18 Aug 2022
  • Fix available
GHSA-9jmq-rx5f-8jwq
  • PyPI/nbconvert
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths 10 Aug 2022
  • Fix available
  • Severity - 5.4 (Medium)