Threats tagged 'brew-jupyterlab-cve-2026-39377'

A path traversal vulnerability in Jupyterlab's nbconvert component (CVE-2026-39377) allows arbitrary file writes outside the intended output directory via crafted cell attachment filenames. The ExtractAttachmentsPreprocessor does not sanitize filenames, enabling attackers to control the destination path, filename, extension, and content of files written to the filesystem. This can lead to unauthorized file creation or modification with the privileges of the nbconvert process. The issue affects versions from 3.4.3 up to but not including 4.5.6_3. A fix is available in version 4.5.6_3, and disabling the ExtractAttachmentsPreprocessor is a recommended workaround.