Executive brief
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Affected products
- PyPI nbconvert
Junglewise Threat Intelligence
CVE-2025-53000: PYSEC-2026-1691 - nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
CVE-2025-53000 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: nbconvert (PyPI). Vendors: PyPI.
Related threats
- nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
- nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
- PYSEC-2022-249 - The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to genera