https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:11:55 +0000 https://cve.radiocsirt.org/vuln/ghsa-4c99-qj7h-p3vg <p><strong>Affected:</strong> PyPI: nbconvert</p> <p># Arbitrary File Write via Path Traversal in Cell Attachment Filenames</p> <p>## Summary</p> <p>nbconvert allows arbitrary file writes to locations outside the intended output directory when processing notebooks containing crafted cell attachment filenames. The `ExtractAttachmentsPreprocessor` passes attachment filenames directly to the filesystem without sanitization, enabling path traversal attacks. This vulnerability provides complete control over both the destination path and file extension.</p> <p>## Impact</p> <p>This vulnerability allows writing files with arbitrary content to arbitrary filesystem locations, limited only by the permissions of the process running nbconvert. The attacker controls: - Full destination path (via `../` traversal) - Filename - File extension - File content</p> <p>## Patches</p> <p>- upgrade to nbconvert v7.17.1</p> <p>## Workarounds</p> <p>disable ExtractAttachmentsPreprocessor by setting:</p> <p>```python c. ExtractAttachmentsPreprocessor.enabled = False ```</p> <p><strong>Affected:</strong> PyPI: nbconvert</p> <p># Arbitrary File Write via Path Traversal in Cell Attachment Filenames</p> <p>## Summary</p> <p>nbconvert allows arbitrary file writes to locations outside the intended output directory when processing notebooks containing crafted cell attachment filenames. The `ExtractAttachmentsPreprocessor` passes attachment filenames directly to the filesystem without sanitization, enabling path traversal attacks. This vulnerability provides complete control over both the destination path and file extension.</p> <p>## Impact</p> <p>This vulnerability allows writing files with arbitrary content to arbitrary filesystem locations, limited only by the permissions of the process running nbconvert. The attacker controls: - Full destination path (via `../` traversal) - Filename - File extension - File content</p> <p>## Patches</p> <p>- upgrade to nbconvert v7.17.1</p> <p>## Workarounds</p> <p>disable ExtractAttachmentsPreprocessor by setting:</p> <p>```python c. ExtractAttachmentsPreprocessor.enabled = False ```</p> https://cve.radiocsirt.org/vuln/ghsa-4c99-qj7h-p3vg