nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
概要
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embed_images=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable HTMLExporter.embed_images; it is not enabled by default.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-39378 nbconvert
- Ubuntu UBUNTU-CVE-2026-39378 nbconvert
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com