Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2198435
AlmaLinux
5919
Alpaquita
15755
Alpine
4608
Android
3674
Azure Linux
17629
BellSoft Hardened Containers
746
Bitnami
9290
Chainguard
1023658
CleanStart
3591
CRAN
14
crates.io
2732
Debian
68356
Echo
6715
GHC
3
GIT
108035
GitHub Actions
55
Go
9203
Hackage
32
Hex
361
Julia
1713
Linux
29974
Mageia
6227
Maven
7040
MinimOS
144170
npm
228732
NuGet
1869
opam
29
openEuler
8800
openSUSE
14454
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25163
Red Hat
23331
Rocky Linux
4295
Root
19534
RubyGems
5326
SUSE
23081
SwiftURL
60
TuxCare
9490
Ubuntu
65370
VSCode
21
Wolfi
288261
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-1691
PyPI/nbconvert
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
07 Jul
Fix available
Severity - 8.5 (High)
GHSA-7jqv-fw35-gmx9
PyPI/nbconvert
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
21 Apr
Fix available
Severity - 6.5 (Medium)
GHSA-4c99-qj7h-p3vg
PyPI/nbconvert
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
21 Apr
Fix available
Severity - 6.5 (Medium)
PYSEC-2026-2230
PyPI/nbconvert
See record for full details
21 Apr
Fix available
Severity - 6.5 (Medium)
PYSEC-2026-2229
PyPI/nbconvert
See record for full details
21 Apr
Fix available
Severity - 6.5 (Medium)
GHSA-xm59-rqc7-hhvf
PyPI/nbconvert
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
18 Dec 2025
Fix available
Severity - 8.5 (High)
PYSEC-2022-249
PyPI/nbconvert
See record for full details
18 Aug 2022
Fix available
GHSA-9jmq-rx5f-8jwq
PyPI/nbconvert
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
10 Aug 2022
Fix available
Severity - 5.4 (Medium)
PyPI - OSV