NB
Product
nbconvert
by jupyter · last CVE Oct 21, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch

Add nbconvert to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39378
6.5
0%
Apr 21
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Affected: >= 6.5, < 7.17.1
CVE-2026-39377
6.5
0%
Apr 21
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Affected: >= 6.5, < 7.17.1
CVE-2021-32862
5.4
1%
Aug 18
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert
Affected: through 6.2.0
Showing 3