Most recent entries from all

BREW-jupyterlab-CVE-2026-39378 — nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

Affected: Homebrew: jupyterlab

## Summary

When `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML.

## Patches

Upgrade to nbconvert 7.17.1

## Workarounds

Do not enable `HTMLExporter.embed_images` (it is not enabled by default).

CLEANSTART-2026-VX32079 — Security fix for CVE-2026-39378 applied in: tensorflow-gpu-jupyter 2.21.0-r6

Affected: CleanStart: tensorflow-gpu-jupyter

Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details.

EUVD-2026-292203

fkie_cve-2026-39378

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable `HTMLExporter.embed_images`; it is not enabled by default.

GHSA-7jqv-fw35-gmx9 — nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

Affected: PyPI: nbconvert

## Summary

## Patches

Upgrade to nbconvert 7.17.1

## Workarounds

Do not enable `HTMLExporter.embed_images` (it is not enabled by default).

OESA-2026-2195 — python-nbconvert security update

Affected: openEuler:24.03-LTS: python-nbconvert

The nbconvert tool, jupyter nbconvert, converts notebooks to various other formats via Jinja templates. The nbconvert tool allows you to convert an .ipynb notebook file into various static formats including HTML, LaTeX, PDF, Reveal JS, Markdown (md), ReStructured Text (rst) and executable script. Security Fix(es):

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations outside the intended output directory when processing notebooks containing crafted cell attachment filenames. The `ExtractAttachmentsPreprocessor` passes attachment filenames directly to the filesystem without sanitization, enabling path traversal attacks. This vulnerability provides complete control over both the destination path and file extension. Version 7.17.1 contains a patch.(CVE-2026-39377)

openSUSE-SU-2026:10603-1 — jupyter-nbconvert-7.17.1-1.1 on GA media

jupyter-nbconvert-7.17.1-1.1 on GA media

PYSEC-2026-2230

Affected: PyPI: nbconvert

UBUNTU-CVE-2026-39378

Affected: Ubuntu:18.04:LTS: nbconvert, Ubuntu:20.04:LTS: nbconvert, Ubuntu:22.04:LTS: nbconvert, Ubuntu:24.04:LTS: nbconvert, Ubuntu:25.10: nbconvert, Ubuntu:26.04:LTS: nbconvert