nbconvert vulnerabilities

2 known vulnerabilities in nbconvert from Jupyter. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  nbconvert: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-114140Oct 21, 2026Jupyter

  The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/preprocessors/extractoutput.py joins the attacker-controlled cell output metadata fi

• 7.8 High severity

  nbconvert: Uncontrolled Search Path Element

  CVE-2025-53000Dec 17, 2025Jupyter

  The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF resul