CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...

CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...

CVE-2026-39378 nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when HTMLExporter.embedimages=True, nbconvert's markdown renderer allows arbitrary file read via path traversal in image references. A malicious notebook...

CVE-2026-39378

nbconvert (jupyter nbconvert) versions 6.5–7.17.0 are vulnerable when HTMLExporter.embed_images is enabled, because the markdown renderer allows arbitrary file reads via path traversal in image references. A malicious notebook could exfiltrate sensitive host files by embedding them as base64 data...

Linux Distros Unpatched Vulnerability : CVE-2026-39378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when...

Allocation of Resources Without Limits or Throttling

Overview OpenTelemetry.Exporter.Jaeger is a Jaeger exporter for OpenTelemetry .NET Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the span and tag conversion. An attacker can drive sustained memory pressure and denial of service by...

GHSA-38H3-2333-QX47 OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

Summary !IMPORTANT There is no plan to fix this issue as OpenTelemetry.Exporter.Jaeger was deprecated in 2023. It is for informational purposes only. OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set...

OpenTelemetry .NET has potential memory exhaustion via unbounded pooled-list sizing in Jaeger exporter conversion path

Summary !IMPORTANT There is no plan to fix this issue as OpenTelemetry.Exporter.Jaeger was deprecated in 2023. It is for informational purposes only. OpenTelemetry.Exporter.Jaeger may allow sustained memory pressure when the internal pooled-list sizing grows based on a large observed span/tag set...

PT-2026-33598

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Exporter.Jaeger affected versions not specified Description This issue allows sustained memory pressure when the internal pooled-list sizing grows based on a large observed span or tag set and that enlarged size is reused for...

CVE-2026-33414 vulnerabilities

Vulnerabilities for packages: falco-no-driver...

GHSA-HC8W-H2MF-HP59 vulnerabilities

Vulnerabilities for packages: falco-no-driver...

CVE-2026-33414 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-HC8W-H2MF-HP59 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: libnvidia-container, hubble, kubernetes-replicator, external-secrets-operator, timoni, falco-no-driver, hugo-extended, mkcert, tetragon, redka, cilium-envoy, nerdctl, mattermost, policy-controller, kubernetes-event-exporter, dive, cloud-provider-vsphere,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: libnvidia-container, hubble, kubernetes-replicator, external-secrets-operator, timoni, falco-no-driver, hugo-extended, tetragon, redka, cilium-envoy, nerdctl, mattermost, policy-controller, kubernetes-event-exporter, dive, cloud-provider-vsphere, step-kms-plugin,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: rancher-helm, libnvidia-container, flux-image-automation-controller, apisix-ingress-controller, aws-flb-firehose, grafana-rollout-operator, hubble, rancher-agent, cilium-cli, contour, external-secrets-operator, timoni, helm-set-status, nuclei, syft, cerbos, keda, wav...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: libnvidia-container, hubble, kubernetes-replicator, external-secrets-operator, timoni, falco-no-driver, hugo-extended, tetragon, redka, cilium-envoy, nerdctl, mattermost, policy-controller, kubernetes-event-exporter, dive, cloud-provider-vsphere, step-kms-plugin,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: malcontent, istio-fips, cilium-fips, libnvidia-container, libnvidia-container-fips, docker-compose-fips, amazon-ssm-agent-fips, docker-cli-fips, spegel-fips, kube-arangodb-fips, knative-operator, knative-serving-fips, kyverno-fips, traefik-fips, atlas-fips, bom,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: malcontent, istio-fips, cilium-fips, libnvidia-container, libnvidia-container-fips, docker-compose-fips, amazon-ssm-agent-fips, docker-cli-fips, spegel-fips, kube-arangodb-fips, knative-operator, knative-serving-fips, kyverno-fips, traefik-fips, atlas-fips, bom,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: yunikorn-web-fips, nodetaint, pushprox-fips, kubeflow-fips, cilium-fips, docker-compose-fips, flannel-cni-plugin-fips, spegel-fips, nats-top, nodetaint-fips, spicedb-operator, atlas-fips, aws-iam-authenticator-fips, nri-couchbase, bom, envconsul-fips,...