https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T14:19:26.003206+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/ghsa-7jqv-fw35-gmx9 GHSA-7jqv-fw35-gmx9 — nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding 2026-10-07T14:19:26.019492+00:00

Affected: PyPI: nbconvert

## Summary

When `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML.

## Patches

Upgrade to nbconvert 7.17.1

## Workarounds

Do not enable `HTMLExporter.embed_images` (it is not enabled by default).