VendorsJupyternbconvertall versions
Vulnerabilities

Jupyter nbconvert

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Published 2025-12-17 · Modified
8.5EPSS 0.003
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Published 2022-08-18 · Modified
7.5EPSS 0.014
CVE-2026-39378
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Published 2026-04-21 · Analyzed
6.5EPSS 0.005
CVE-2026-39377
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Published 2026-04-21 · Analyzed
6.5EPSS 0.004