Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #5

High-severity path traversal flaw disclosed in Jupyter nbconvert

Original: 🚨 EUVD-2026-107551 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: nbconvert 🏢 Vendor: jupyter 📅 Updated: 2026-10-22 📝 nbconvert:

A high-severity vulnerability, EUVD-2026-107551, has been catalogued in Jupyter's nbconvert tool, scoring 8.8 out of 10 on the CVSS v3.1 scale. The flaw allows arbitrary file writes through path traversal in cell output filenames when exporting notebooks to Markdown, LaTeX, reStructuredText and AsciiDoc formats. The entry was updated on 22 October 2026, and security teams are expected to review whether their export pipelines are exposed.

Why now: The vulnerability listing was just updated, prompting security teams to check their Jupyter environments for exposure

JupyternbconvertENISA

Open on mastodon →

Evidence

• 🚨 EUVD-2026-107551 📊 Score: 8.8/10 (CVSS v3.1) 📦 Product: nbconvert 🏢 Vendor: jupyter 📅 Updated: 2026-10-22 📝 nbconvert: Arbitrary file write through path traversal in cell output filenames when exporting to md, latex, rst and asciidoc 🔗 https:// euvd.enisa.europa.eu/vulnerabi… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3261178