nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Résumé
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embed_images=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook can exfiltrate sensitive files from the conversion host by embedding them as base64 data URIs in the output HTML. nbconvert 7.17.1 contains a fix. As a workaround, do not enable HTMLExporter.embed_images; it is not enabled by default.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-39378 nbconvert
- Ubuntu UBUNTU-CVE-2026-39378 nbconvert
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com