10 Total advisories
10 Vulnerabilities
0 Malware
Dependency scanning
Check whether nbconvert is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
MEDIUM 5.4
CVE-2026-6658
jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports
UNKNOWN
CVE-2026-114140
nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc
MEDIUM 6.5
CVE-2026-39377
nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames
MEDIUM 6.5
CVE-2026-39378
nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding
UNKNOWN
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
MEDIUM 5.4
CVE-2021-32862
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
MEDIUM 6.5
CVE-2026-39378
CVE-2026-39378
MEDIUM 6.5
CVE-2026-39377
CVE-2026-39377
UNKNOWN
CVE-2025-53000
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
UNKNOWN
CVE-2021-32862
CVE-2021-32862
Browse more PyPI advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes