Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:jupyter:nbconvert:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Jupyter nbconvert: Arbitrary file write via path traversal (CVE-2026-114140)

Jupyter nbconvert versions up to 7.17.1 are vulnerable to an arbitrary file write attack via path traversal in malicious notebook cell metadata, allowing execution of arbitrary file writes when exporting to specific formats.

nbconvert path-traversal arbitrary-file-write cve-2026-114140 supply-chain
1t 1c