NB
Product
nbconvert
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add nbconvert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114140 New | 8.8 | Oct 21 | nbconvert: File write via path traversal in cell output filenames Affected: >= 5.4.0, < 7.17.2 |
| CVE-2025-53000 | 7.8 | Dec 17 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates Affected: through 7.16.6 |
| CVE-2026-39378 | 6.5 | Apr 21 | nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding Affected: >= 6.5, < 7.17.1 |
| CVE-2026-39377 | 6.5 | Apr 21 | nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames Affected: >= 6.5, < 7.17.1 |
| CVE-2021-32862 | 5.4 | Aug 18 | The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert Affected: through 6.2.0 |
Showing 5