Threats tagged 'brew-jupyterlab-cve-2026-39378'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-39378Jupyterlab · nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding Medium6.5EPSS 0.3%2026-08-13GCVE DatabaseCVE-2026-39378 A vulnerability in JupyterLab's nbconvert component allows arbitrary file read via path traversal when HTMLExporter.embed_images is enabled. This can lead to sensitive files being exfiltrated by embedding them as base64 data URIs in the output HTML. The issue affects versions from 3.4.3 up to but not including 4.5.6_3. A fix is available in version 4.5.6_3. The vulnerability has a CVSS score of 6.5, indicating medium severity. EPSS 0.3%Report on CVE-2026-39378 Vulnerability #brew-jupyterlab-cve-2026-39378 #homebrew	GCVE Database	2026-08-13

Page 1 of 1