CVE-2026-39378

A flaw was found in nbconvert, a tool used to convert Jupyter notebooks. A malicious notebook can exploit this vulnerability when the HTMLExporter.embedimages setting is enabled. This allows for path traversal in image references, which can lead to arbitrary file read. Consequently, sensitive fil...