Threats tagged 'brew-jupyterlab-cve-2025-53000'

On Windows, JupyterLab's nbconvert tool has a vulnerability where converting notebooks with SVG output to PDF can lead to unauthorized code execution. This occurs because nbconvert searches for an 'inkscape' executable in a way that allows a malicious 'inkscape.bat' batch file in the current directory to be executed. This uncontrolled search path vulnerability affects Windows users running vulnerable versions of JupyterLab.