PYSEC-2026-2230
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/nbconvert/PYSEC-2026-2230.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-2230
- Aliases
- Published
- 2026-04-21T01:16:06.073Z
- Modified
- 2026-07-13T07:15:37.724478345Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when
HTMLExporter.embed_images=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enableHTMLExporter.embed_images; it is not enabled by default. - References
Affected packages
PyPI / nbconvert
Package
- Name
- nbconvert
- View open source insights on deps.dev
- Purl
- pkg:pypi/nbconvert
Affected versions
6.*
6.5.0
6.5.1
6.5.2
6.5.3
6.5.4
7.*
7.0.0rc0
7.0.0rc1
7.0.0rc2
7.0.0rc3
7.0.0
7.1.0
7.2.0
7.2.1
7.2.2
7.2.3
7.2.4
7.2.5
7.2.6
7.2.7
7.2.8
7.2.9
7.2.10
7.3.0
7.3.1
7.4.0
7.5.0
7.6.0
7.7.0
7.7.1
7.7.2
7.7.3
7.7.4
7.8.0
7.9.0
7.9.1
7.9.2
7.10.0
7.11.0
7.12.0
7.13.0
7.13.1
7.14.0
7.14.1
7.14.2
7.15.0
7.16.0
7.16.1
7.16.2
7.16.3
7.16.4
7.16.5
7.16.6
7.17.0