Threats tagged 'brew-jupyterlab-cve-2026-114140'

nbconvert versions up to 7.17.1 have an arbitrary file write vulnerability caused by path traversal in the filename attribute of cell output metadata when exporting notebooks to markdown, latex, rst, or asciidoc formats. This allows an attacker to write files to arbitrary locations if a victim converts a malicious notebook file. The vulnerability is fixed in version 4.6.4_3.