NB
Product
nbconvert
by jupyter · last CVE Oct 21, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch

Add nbconvert to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39378
6.5
0%
Apr 21
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Affected: >= 6.5, < 7.17.1
CVE-2026-39377
6.5
0%
Apr 21
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
Affected: >= 6.5, < 7.17.1
CVE-2021-32862
5.4
1%
Aug 18
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
Affected: <= 6.2
Showing 3